bug#74796: misspelling of color name in .infokey file causes segmentation fault

[Danny Darden]

Package: info

Version:  6.8

Severity: important

Error: Segmentation fault (core dumped)

Contents of .infokey file:

#var

link-style=yello

active-link-style=yellow,bold

Match-style=underline,bold,nocolor q

Suggestive fix: Error handling to output either an "error in .infokey format or ignoring .infokey"

Details: adding the w on the end of yello in line 2 resolved the error and the program loaded properly.

Diagnosis: Additionally, the error was reproducible with the color magenta if spelled as "magent" without the a on the end.

Implications: Unknown if the segmentation fault produced by the error can be leveraged to escalate privilege.