Re: Fwd: Bug#1025940: info: buffer overflow in copy_converting()

[Gavin Smith]

On Mon, Dec 12, 2022 at 01:31:39PM +0100, Hilmar Preuße wrote:
> Hello,
> 
> another one for you. The issue is reproducible with latest git checkout.
> I could only test on amd64, where the error message looks differently.
> 
> hille@sid-amd64:~$ /usr/bin/info groff > /dev/null
> realloc(): invalid next size
> Aborted (core dumped)

Apologies for the further crash.  I believe I have fixed it in commit
9a83ffc3d.  I have also added the change to the release branch, and I
think that we should make a bug-test release fairly soon with this fix
in it (say, within a month).

The same crash occurs when running interactively.  If you
run "info groff" and then navigate to the "Manipulating Hyphenation"
node, the program will crash.  (I found this by holding down the space
bar from the Top node.)

I was able to run the program with valgrind -vgdb-error=0 and attach
with gdb.  The error occurred in the text_buffer_iconv function, as
Jakub's log indicated.