lynx-dev Bug#35523: lynx: cookie handling broken with non-printable characters (fwd)

[Christian Hudon]

Hi,

I'm the Debian maintainer of the lynx package. I received the following bug 
report about lynx. I'm forwarding it to you.

  Christian
> --- Begin Message ---
>
>
>
> Subject: 
>
> Bug#35523: lynx: cookie handling broken with non-printable characters
>
>
>
>
> Date: 
>
> Sat, 3 Apr 1999 17:45:10 -0600
>
>
>
>
> Package: lynx
> Version: 2.8.1-3
>
> Cookies that are stored in the .lynx_cookies file get mangled if they
> contain non-printable characters.  For example, if I receive a cookie like:
>
> Set-Cookie: bunny="I3\012."
> (where \012 is LF)
>
> After a restart (i.e. quit and relaunch), Lynx will send back:
>
> Cookie: bunny=I3\012.
> (without the quotes and with \012 as a literal string, not an LF character).
>
> This severely breaks CGI scripts that use the Python Cookie module to store
> non-strings (like integers) in cookies, for example.
>
> Lynx does manage to get it right when the cookies aren't stored (i.e. during
> the same session).  So: apparently either the cookie file writing or parsing
> is the problem.
>
> -- System Information
> Debian Release: 2.1
> Kernel Version: Linux quango.watervalley.net 2.2.4 #20 Thu Apr 1 15:35:42 CST 
> 1999 i486 unknown
>
> Versions of the packages lynx depends on:
> ii  libc6           2.0.7.19981211 GNU C Library: shared libraries
> ii  slang1          1.2.2-2        The S-Lang programming library - runtime ver
> ii  slang1          1.2.2-2        The S-Lang programming library - runtime ver
> ii  zlib1g          1.1.3-2        compression library - runtime
>
> --- Begin /etc/lynx.cfg (modified conffile)
> STARTFILE:file://localhost/home/quango/lynx_bookmarks.html
> HELPFILE:file://localhost/usr/doc/lynx/lynx_help/lynx_help_main.html
> DEFAULT_INDEX_FILE:http://www.ncsa.uiuc.edu/SDG/Software/Mosaic/MetaIndex.html
> LOCAL_EXECUTION_LINKS_ALWAYS_ON:FALSE
> LOCAL_EXECUTION_LINKS_ON_BUT_NOT_REMOTE:FALSE
> TRUSTED_EXEC:none
> ALWAYS_TRUSTED_EXEC:none
> TRUSTED_LYNXCGI:none
> NNTPSERVER:news.watervalley.net
> USE_MOUSE:TRUE
> PRINTER:Okidata OL840:enscript --printer=lp < %s:FALSE
> NO_DOT_FILES:FALSE
> MINIMAL_COMMENTS:TRUE
> GLOBAL_EXTENSION_MAP:/etc/mime.types
> PERSONAL_EXTENSION_MAP:.mime.types
> XLOADIMAGE_COMMAND:
> GLOBAL_MAILCAP:/etc/mailcap
> PERSONAL_MAILCAP:.mailcap
> COLOR:0:lightgray:black
> COLOR:1:blue:black
> COLOR:2:yellow:blue
> COLOR:3:green:black
> COLOR:4:magenta:black
> COLOR:5:blue:black
> COLOR:6:red:black
> COLOR:7:magenta:cyan
>
> --- End /etc/lynx.cfg
>
> --- End Message ---

pgpO4sJ6yNGZQ.pgp
Description: PGP signature