gdb says this:
(gdb) where
#0 0xef622ea0 in strlen () from /usr/lib/libc.so.1
#1 0xef6603a8 in _doprnt () from /usr/lib/libc.so.1
#2 0xef66b9f8 in vfprintf () from /usr/lib/libc.so.1
#3 0x4b318 in smtp_printf ()
#4 0x4f2fc in smtp_setup_msg ()
#5 0x2fe38 in main ()
This is on Solaris 2.5, compiled with gcc 2.95.1.
I just checked exim 3.03 and it said "550 EXPN not available", so my
test wouldn't have worked anyway, but still exim shouldn't segfault.
Unfortunately, smtp_setup_msg() is slightly too big for me to understand
within a few seconds...
Martin
--
Martin Buck
Ascom Systec AG
Applicable Research & Technology
Phone: +41-62-889-5292, Fax: -5290