[news.software.b] Bug with supersedes

joey@tessi.UUCP (Joe Pruett) (02/05/88)

I think I've found a bug dealing with the Supersedes line.  Actually,
now that I think about it, it must affect all cancel operations.
Anyway, in control.c at line 657 is a while loop that will dereference
a NULL+1 pointer after q is set to NULL when index can't find a space
char in p.  Either a conditional break needs to be added before line
690, or the loop test needs to be strengthened.  Anyway, the end result
is that an article with a supersedes line comes in, and when it tries
to cancel the old article, it core dumps, and doesn't remove the .ar*
and .in* file from the spool directory.  After a while you end up with
hundreds of files laying around.  This is especially nasty with uucp
map files.  I'll let you folks decide what the best fix is, and I'll
just keep watching my spool area...

	Joe Pruett
	...!tektronix!tessi!joey