[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bug-wget] Re: wget 1.12 memory exhausted

From: Platonides
Subject: Re: [Bug-wget] Re: wget 1.12 memory exhausted
Date: Fri, 06 Aug 2010 01:44:16 +0200
User-agent: Thunderbird

Keisial wrote:
> That scss file contains several entries like:
> background-image:url(  );
> background-image:url();
> It may be resolving them to itself, thus entering into some kind of loop?
> I have tested, and with background-image:url(); it works ok:
> "Already on the black list. Decided NOT to load it."
> background-image:url(  ); [Two spaces] it results in the reported condition:
> wget: memory exhausted
> Finally, background-image:url( ); [One space] it segfaults.

The problem is at css-url.c:145
  uri = xmalloc (*length + 1);
  if (uri)
      strncpy (uri, at + *pos, *length);
      uri[*length] = '\0';

It segfaults at the strncpy with *length = -1

The ENOMEM is probably reached with *length = -2, which turns into a
xmalloc of an impossible size (taking the negative number as unsigned).

reply via email to

[Prev in Thread] Current Thread [Next in Thread]