From mboxrd@z Thu Jan  1 00:00:00 1970
Date: Fri, 27 Jun 2008 09:45:55 -0700
From: Anthony Martin <ality@pbrane.org>
To: 9fans@9fans.net
Message-ID: <20080627164555.GA20301@dinah>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Subject: [9fans] 9vx frogs
Topicbox-Message-UUID: c8bea434-ead3-11e9-9d60-3106f5b1d025

Trying to exec a filename with frogs in it causes the first
validnamedup() in sysexec to throw an error. The waserror
branch then tries to free(file) causing an invalid pointer
in munmap_chunk.

I can provide a trace if necessary but I think it's just
a matter of not trying to free "file" before it becomes
a heap address from the dup.

     Anthony