Possible SEGV in fixup_tgetstr()

[ruijie]

What version of Midnight Commander is used?

1. output of mc -V:

GNU Midnight Commander 4.8.27
Built with GLib 2.68.4
Built with S-Lang 2.3.2 with terminfo database
With builtin Editor and Aspell support
With subshell support as default
With support for background operations
With mouse support on xterm and Linux console
With support for X11 events
With internationalization support
With multiple codepages support
With ext2fs attributes support
Virtual File Systems:
 cpiofs, tarfs, sfs, extfs, ext2undelfs, ftpfs, sftpfs, fish
Data types:
 char: 8; int: 32; long: 64; void *: 64; size_t: 64; off_t: 64;

2. Output of mc -F:

Home directory: /home/ruijie
Profile root directory: /home/ruijie

[System data]
    Config directory: /etc/mc/
    Data directory:   /usr/share/mc/
    File extension handlers: /usr/lib/mc/ext.d/
    VFS plugins and scripts: /usr/lib/mc/
	extfs.d:        /usr/lib/mc/extfs.d/
	fish:           /usr/lib/mc/fish/

[User data]
    Config directory: /home/ruijie/.config/mc/
    Data directory:   /home/ruijie/.local/share/mc/
	skins:          /home/ruijie/.local/share/mc/skins/
	extfs.d:        /home/ruijie/.local/share/mc/extfs.d/
	fish:           /home/ruijie/.local/share/mc/fish/
	mcedit macros:  /home/ruijie/.local/share/mc/mc.macros
	mcedit external macros: /home/ruijie/.local/share/mc/mcedit/macros.d/macro.*
    Cache directory:  /home/ruijie/.cache/mc/

3. Output of mc --configure-options:

 '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--runstatedir=/run' '--disable-maintainer-mode' '--disable-dependency-tracking' 'AWK=awk' 'X11_WWW=x-www-browser' '--libexecdir=/usr/lib' '--with-x' '--with-screen=slang' '--disable-rpath' '--disable-static' '--disable-silent-rules' '--enable-aspell' '--enable-vfs-sftp' '--enable-vfs-undelfs' '--enable-tests' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -ffile-prefix-map=/build/mc-EOIzsU/mc-4.8.27=. -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security' 'LDFLAGS=-Wl,-Bsymbolic-functions -flto=auto -Wl,-z,relro -Wl,-z,now -Wl,--as-needed' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2'

What steps will reproduce the problem?

1. Copy the attached file to ~/.terminfo/x/
2. Run mc

What is the expected output?

No crash

What do you see instead?

Program received signal SIGSEGV, Segmentation fault.
0x00007ffde9052938 in fixup_tgetstr (what=0x5555556ca220 <error: Cannot access memory at address 0x5555556ca220>) at ./src/sldisply.c:2536
(gdb) bt
#0  0x00007ffde9052938 in fixup_tgetstr (what=0x5555556ca220 <error: Cannot access memory at address 0x5555556ca220>) at ./src/sldisply.c:2536
#1  0x00007ffde9052a67 in tt_tgetstr (cap=0x7ffde90f384a "im") at ./src/sldisply.c:2592
#2  0x00007ffde9052fcc in SLtt_initialize (term=0x7fffffffed31 "xterm-256color") at ./src/sldisply.c:2780
#3  0x00007ffde9052c6f in SLtt_get_terminfo () at ./src/sldisply.c:2680
#4  0x00005555555735fe in ?? ()
#5  0x00007ffde9429d90 in __libc_start_call_main (main=main@entry=0x555555571450, argc=argc@entry=1, argv=argv@entry=0x7fffffffe2c8)
    at ../sysdeps/nptl/libc_start_call_main.h:58
#6  0x00007ffde9429e40 in __libc_start_main_impl (main=0x555555571450, argc=1, argv=0x7fffffffe2c8, init=<optimized out>, fini=<optimized out>, 
    rtld_fini=<optimized out>, stack_end=0x7fffffffe2b8) at ../csu/libc-start.c:392
#7  0x0000555555575135 in ?? ()

[andrew_b]

fixup_tgetstr() is a function of S-Lang library.
Please send a bugreport to S-Lang: ​http://www.jedsoft.org/slang/mailinglists.html