https://gitlab.synchro.net/main/sbbs/-/issues/779#note_5546
Repeatable here
```
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/sbbs/exec/sbbs t! d'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 sbbs_t::random_menu (this=0x7fce51066f00, name=0x7fce3c173ae0 "random*", mode=0, obj=0x7fce5442f510) at prntfile.cpp:377
377 if(menu_exists(names[i], NULL, path)) {
[Current thread is 1 (Thread 0x7fce36afd640 (LWP 861939))]
(gdb) bt
#0 sbbs_t::random_menu (this=0x7fce51066f00, name=0x7fce3c173ae0 "random*", mode=0, obj=0x7fce5442f510) at prntfile.cpp:377
#1 0x00007fce5c31e8ff in sbbs_t::menu (this=0x7fce51066f00, code=0x7fce3c173ae0 "random*", mode=0, obj=0x7fce5442f510) at prntfile.cpp:263
#2 0x00007fce5c20bde1 in js_menu (cx=0x7fce3c004b00, argc=1, arglist=0x7fce373ff0a0) at js_bbs.cpp:1204
#3 0x00007fce5c66ba6d in js::CallJSNative (vp=0x7fce373ff0a0, argc=1, native=0x7fce5c20b9ce <js_menu(JSContext*, uintN, jsval*)>,
cx=0x7fce3c004b00) at /home/bbs/sbbs-git/3rdp/src/mozjs/js-1.8.5/js/src/jscntxtinlines.h:701
#4 js::Interpret (cx=0x7fce3c004b00, entryFrame=0x7fce373ff048, inlineCallCount=0, interpMode=JSINTERP_NORMAL) at jsinterp.cpp:4799
#5 0x00007fce5c45df6c in js::RunScript (cx=0x7fce3c004b00, script=0x7fce3c15a3c0, fp=0x7fce373ff048)
at /home/bbs/sbbs-git/3rdp/src/mozjs/js-1.8.5/js/src/jsinterp.cpp:653
#6 0x00007fce5c460f05 in js::Execute (cx=0x7fce3c004b00, chain=0x7fce5442f510, script=0x7fce3c15a3c0, prev=0x0, flags=0,
result=0x7fce36af09c8) at /home/bbs/sbbs-git/3rdp/src/mozjs/js-1.8.5/js/src/jsinterp.cpp:1028
#7 0x00007fce5c3c1d5d in JS_ExecuteScript (cx=0x7fce3c004b00, obj=0x7fce5442f510, scriptObj=0x7fce5442f558, rval=0x7fce36af09c8)
at jsapi.cpp:4998
#8 0x00007fce5c1d0b00 in sbbs_t::js_execfile (this=0x7fce51066f00, cmd=0x7fce5106ffc6 "logon", startup_dir=0x0, scope=0x0,
js_cx=0x7fce3c004b00, js_glob=0x7fce54403048) at exec.cpp:695
#9 0x00007fce5c1d153a in sbbs_t::exec_bin (this=0x7fce51066f00, cmdline=0x7fce5106ffc6 "logon", csi=0x7fce510798f8, startup_dir=0x0)
at exec.cpp:824
#10 0x00007fce5c2dcfcf in sbbs_t::logon (this=0x7fce51066f00) at logon.cpp:468 #11 0x00007fce5c19ec2d in sbbs_t::answer (this=0x7fce51066f00) at answer.cpp:772
#12 0x00007fce5c2f5309 in node_thread (arg=0x7fce51066f00) at main.cpp:4425
#13 0x00007fce5be1fac3 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442
#14 0x00007fce5beb1850 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
```
I copies chat.msg into /sbbs/text/menu/random and called then random1.msg to random6.msg and it core dumps at loading message pointers.
Oddly, if I rename random random.old it still happens. I had to remove the directory, but that's probably more than you need to know.
--- SBBSecho 3.20-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)