Package: wget
Version: 1.12-2.1
Severity: normal

Check this code in http.c:

  statcode = resp_status (resp, &message);
  hs->message = xstrdup (message);

If the response header (see resp.data) contains garbage like:

$4 = {data = 0x938540 "HTTP/1.1 e/apt-cacher-ng/\r\nDate: Sun Sep 12 11:10:37 
2010\r\nServer: Debian Apt-Cacher NG/0.5.5\r\nX-Original-Source: 
http://ftp.uni-kl.de/pub/linux/debian/dists/lenny/Release\r\nConnection: 
close\r\n\r\n", headers = 0x938750}

...then resp_status message to NULL and xstrdup simply crashes.

Regards,
Eduard.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.36-rc3 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages wget depends on:
ii  dpkg                      1.15.8.4       Debian package management system
ii  install-info              4.13a.dfsg.1-5 Manage installed documentation in 
ii  libc6                     2.11.2-5       Embedded GNU C Library: Shared lib
ii  libssl0.9.8               0.9.8o-2       SSL shared libraries

wget recommends no packages.

wget suggests no packages.

-- no debconf information

-- 
Trauer ist eine Haltung zu etwas. Aber es ist keine
Grundhaltung.
                -- Benjamin Stramke



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to