Refresh header and Wget

[Peng Yu]

Could the process of the Refresh header be added to Wget? Thanks.

On 6/22/20, Tim Rühsen  wrote:
> Hi,
>
> the Refresh header is not processed by Wget.
>
> Regards, Tim
>
> On 22.06.20 00:39, Peng Yu wrote:
>> I see Refresh response header as described below. It seems that wget
>> does not support. Could anybody confirm whether this is the case?
>> Thanks.
>>
>> http://www.otsukare.info/2015/03/26/refresh-http-header
>>
>
>


-- 
Regards,
Peng

Re: Wget2 fuzzer crash on ODROID XU4

[Jeffrey Walton]

On Mon, Jun 22, 2020 at 2:10 PM Jeffrey Walton  wrote:
>
> Hi Everyone/Tim,
>
> Here's another crash on the fuzzer. This came from an ODROID XU4.
>
> Here's the text from the log file in case I screw up the attachment again.
>
> FAIL: wget_options_fuzzer
> =
>
> testing 7 bytes from
> '/home/jwalton/wget2/fuzz/wget_options_fuzzer.in/c692273deb2772da307ffe37041fef77bf4baa97'
> GNU Wget2 1.99.2 - multithreaded metalink/file/website downloader
>
> +digest -https -ssl +ipv6 +iri +large-file +nls -ntlm -opie +psl -hsts
> +iconv +idn2 +zlib +lzma -brotlidec -zstd +bzip2 -lzip -http2 -gpgme

I think I managed to get a backtrace out of it, but I am not sure how
good it is.

$ ../libtool --mode=execute gdb wget_options_fuzzer
GNU gdb (Ubuntu 8.1-0ubuntu3.2) 8.1.0.20180409-git
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "arm-linux-gnueabihf".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
.
Find the GDB manual and other documentation resources online at:
.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from
/home/jwalton/Build-Scripts/wget2/fuzz/.libs/wget_options_fuzzer...done.
(gdb) r
Starting program:
/home/jwalton/Build-Scripts/wget2/fuzz/.libs/wget_options_fuzzer
Cannot parse expression `.L1207 4@r4'.
warning: Probes-based dynamic linker interface failed.
Reverting to original interface.

[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".

Program received signal SIGILL, Illegal instruction.
_armv7_tick () at crypto/armv4cpuid.S:136
136 crypto/armv4cpuid.S: No such file or directory.
(gdb) c
Continuing.
testing 7 bytes from
'/home/jwalton/Build-Scripts/wget2/fuzz/wget_options_fuzzer.in/c692273deb2772da307ffe37041fef77bf4baa97'
GNU Wget2 1.99.2 - multithreaded metalink/file/website downloader

+digest -https -ssl +ipv6 +iri +large-file +nls -ntlm -opie +psl -hsts
+iconv +idn2 +zlib +lzma -brotlidec -zstd +bzip2 -lzip -http2 -gpgme

Copyright (C) 2012-2015 Tim Ruehsen
Copyright (C) 2015-2020 Free Software Foundation, Inc.

License GPLv3+: GNU GPL version 3 or later
.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Please send bug reports and questions to .
free(): invalid pointer

Program received signal SIGABRT, Aborted.
__libc_do_syscall () at ../sysdeps/unix/sysv/linux/arm/libc-do-syscall.S:47
47  ../sysdeps/unix/sysv/linux/arm/libc-do-syscall.S: No such file
or directory.
(gdb) bt full
#0  __libc_do_syscall () at ../sysdeps/unix/sysv/linux/arm/libc-do-syscall.S:47
No locals.
#1  0xb6e4cb32 in __libc_signal_restore_set (set=0xbeffef84)
at ../sysdeps/unix/sysv/linux/nptl-signals.h:80
_a2tmp = -1090523260
_a2 = -1090523260
_nametmp = 175
_a3tmp = 0
_a3 = 0
_a1 = 0
_a4tmp = 8
_a1tmp = 2
_a4 = 8
_name = 175
#2  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:48
set = {__val = {0, 0, 0, 4241216, 320252, 3070228848, 320132,
320140, 3070088761, 320140, 3070229196, 5, 0, 0,
3070228848, 0, 3070228848, 3070229312, 3070229312, 3070204448,
320188, 0, 3070088761, 320196, 4294967295, 5, 3068334024,
3070205888, 0, 32, 3068447921, 3070204888}}
pid = 
tid = 
ret = 
---Type  to continue, or q  to quit---
#3  0xb6e4d82e in __GI_abort () at abort.c:79
save_stage = 1
act = {__sigaction_handler = {sa_handler = 0x1c4,
sa_sigaction = 0x1c4}, sa_mask = {__val = {3069747704, 3070202984,
  320540, 320536, 3069747704, 3070202984, 0, 2275345624,
  3069747704, 3070202984, 3069734728, 71104550, 3069757083,
  3069741960, 320644, 3070224752, 3070226432, 2863311531,
  320536, 320540, 3070198028, 0, 0, 3069751837,
  2275345624, 0, 0, 3069757083, 320740, 3070202984,
  320644, 320652}}, sa_flags = -1090522616,
  sa_restorer = 0xb6ebe057 <__GI___mmap+22>}
sigs = {__val = {32, 0 }}
#4  0xb6e75460 in __libc_message (action=action@entry=do_abort,
fmt=) at ../sysdeps/posix/libc_fatal.c:181
ap = {__ap = 0xbefff244}
fd = 2
list = 
nlist = 
cp = 
written = 
#5  0xb6e797ee in malloc_printerr (str=) at malloc.c:5350
No locals.
#6  0xb6e7ab50 in _int_free (av=, p=0x40f904, 

Wget2 fuzzer crash on ODROID XU4

[Jeffrey Walton]

Hi Everyone/Tim,

Here's another crash on the fuzzer. This came from an ODROID XU4.

Here's the text from the log file in case I screw up the attachment again.

FAIL: wget_options_fuzzer
=

testing 7 bytes from
'/home/jwalton/wget2/fuzz/wget_options_fuzzer.in/c692273deb2772da307ffe37041fef77bf4baa97'
GNU Wget2 1.99.2 - multithreaded metalink/file/website downloader

+digest -https -ssl +ipv6 +iri +large-file +nls -ntlm -opie +psl -hsts
+iconv +idn2 +zlib +lzma -brotlidec -zstd +bzip2 -lzip -http2 -gpgme

Jeff
<>
<>

Re:

[Tim Rühsen]

Hi,

the Refresh header is not processed by Wget.

Regards, Tim

On 22.06.20 00:39, Peng Yu wrote:
> I see Refresh response header as described below. It seems that wget
> does not support. Could anybody confirm whether this is the case?
> Thanks.
> 
> http://www.otsukare.info/2015/03/26/refresh-http-header
> 



signature.asc
Description: OpenPGP digital signature