[Kolab-devel] [issue3769] Freebusy list send as email crashes in KCal::IncidenceFormatter::formatICalInvitation

[Bernhard Reiter]

New submission from Bernhard Reiter <bernhard at intevation.de>:

Open the attached malicious email and get a crash.

Architecture: i386
Source: kdepim
Version: 4:3.5.10.enterprise.0.20090715.996815-kk1

[KCrash handler]
#5  QValueList (this=0xfff20828, l=@0x30)
    at /usr/share/qt3/include/qvaluelist.h:433
#6  0xf65cb829 in ListBase (this=0xfff20828, l=@0x30)
    at ../libkcal/listbase.h:42
#7  0xf66121d4 in rsvpRequested (incidence=<value optimized out>)
    at incidenceformatter.cpp:729
#8  0xf6620352 in KCal::IncidenceFormatter::formatICalInvitation (
    invitation=@0xfff20cb8, mCalendar=0xfff20b9c, helper=0xfff20c90)
    at incidenceformatter.cpp:1602
#9  0xf1e7b80b in (anonymous namespace)::Formatter::format (this=0x8639de0,
    bodyPart=0xfff20d58, writer=0x85c7918) at text_calendar.cpp:173
#10 0xf4e96e9d in KMail::ObjectTreeParser::parseObjectTree (this=0xfff20f2c,
    node=0x8641ca0) at objecttreeparser.cpp:281
#11 0xf4d72a4f in KMReaderWin::parseMsg (this=0x85c58f8, aMsg=0x85ce440)
    at kmreaderwin.cpp:1603
#12 0xf4d6b254 in KMReaderWin::displayMessage (this=0x85c58f8)
    at kmreaderwin.cpp:1528
#13 0xf4d6b436 in KMReaderWin::updateReaderWin (this=0x85c58f8)
    at kmreaderwin.cpp:1463
#14 0xf4d6b922 in KMReaderWin::setMsg (this=0x85c58f8, aMsg=0x85ce440,
    force=true) at kmreaderwin.cpp:1269
#15 0xf4ed1e03 in KMReaderMainWin::showMsg (this=0x85ed448,
    encoding=@0x84eac1c, msg=0x85ce440) at kmreadermainwin.cpp:146
#16 0xf4ec4297 in KMOpenMsgCommand::slotResult (this=0x84eab60, job=0x85f40f8)
    at kmcommands.cpp:1062
#17 0xf4ec7e1c in KMOpenMsgCommand::qt_invoke (this=0x84eab60, _id=10,
    _o=0xfff213a4) at kmcommands.moc:1231
#18 0xf6fb7d4f in QObject::activate_signal (this=0x85f40f8, clist=0x844cff0,
    o=0xfff213a4) at kernel/qobject.cpp:2356
[..]

----------
assignedto: allen
files: kontact-crash-freebusy-mail.mail
messages: 20976
nosy: allen, bernhard, emanuel, till
priority: critical
status: unread
title: Freebusy list send as email crashes in KCal::IncidenceFormatter::formatICalInvitation
topic: enterprise35, kde client, kkc
___________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://www.intevation.de/roundup/kolab/issue3769>
___________________________________________________
-------------- next part --------------
A non-text attachment was scrubbed...
Name: kontact-crash-freebusy-mail.mail
Type: application/octet-stream
Size: 1605 bytes
Desc: not available
URL: <http://lists.kolab.org/pipermail/devel/attachments/20090720/ba077eaf/attachment.obj>