bug-wget
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug-wget] [bug #44884] wget crash with empty --header


From: Elan Ruusamäe
Subject: [Bug-wget] [bug #44884] wget crash with empty --header
Date: Mon, 20 Apr 2015 18:02:50 +0000
User-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) PLD/Th Chromium/41.0.2272.101 Chrome/41.0.2272.101 Safari/537.36

URL:
  <http://savannah.gnu.org/bugs/?44884>

                 Summary: wget crash with empty --header
                 Project: GNU Wget
            Submitted by: glen
            Submitted on: Mon 20 Apr 2015 06:02:49 PM GMT
                Category: None
                Severity: 3 - Normal
                Priority: 5 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
                 Release: 1.16.3
        Operating System: GNU/Linux
         Reproducibility: Every Time
           Fixed Release: None
         Planned Release: None
              Regression: None
           Work Required: None
          Patch Included: None

    _______________________________________________________

Details:

$ wget --header 'Content-Type:text/plain;charset=UTF-8' --header ''
https://google.com
Segmentation fault


note, that this one does not crash:
$ wget --header '' https://google.com
--2015-04-20 20:51:11--  https://google.com/

so the first valid header is neccessary

looks like double-free, the trace is incomplete, but you'll get the idea:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff68ad874 in free () from /lib64/libc.so.6
(gdb) bt
#0  0x00007ffff68ad874 in free () from /lib64/libc.so.6
#1  0x0000000000430719 in ?? ()
#2  0x0000000000421f98 in ?? ()
#3  0x0000000000422bff in ?? ()
#4  0x0000000000405f77 in ?? ()
#5  0x00007ffff68528a0 in __libc_start_main () from /lib64/libc.so.6
#6  0x00000000004072a9 in ?? ()
(gdb) 





    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?44884>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]