Subject: bug#74796: misspelling of color name in .infokey file causes segmentation fault

From: Danny Darden <[email-masked]>
Date: Wed, 11 Dec 2024 15:54:52 +0000

Package: info
Version:  6.8
Severity: important

Error: Segmentation fault (core dumped)
Contents of .infokey file:
#var
link-style=yello
active-link-style=yellow,bold
Match-style=underline,bold,nocolor q

Suggestive fix: Error handling to output either an "error in .infokey format or ignoring .infokey"

Details: adding the w on the end of yello in line 2 resolved the error and the program loaded properly.

Diagnosis: Additionally, the error was reproducible with the color magenta if spelled as "magent" without the a on the end.

Implications: Unknown if the segmentation fault produced by the error can be leveraged to escalate privilege.