Subject: echoping: Glibc complains when the URL parameter is too long
Package: echoping
Version: 5.2.0-2.1
Severity: normal

*** Please type your report below this line ***


When the -h (URL) parameter exceeds 118 caharcters, the program either
segfaults or aborts, as shown below. Note sometime the URL string being
tested with echoping(1) may exceed this length when query parameters are
included.

The first example here shows correct operation:

/usr/bin/echoping -h
"/?query=012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456"
www.james.rcpt.to
Elapsed time: 0.594476 seconds


The second example shows the URL querystring being one character longer:

[EMAIL PROTECTED]:~$ /usr/bin/echoping -h
"/?query=0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567"
www.james.rcpt.to
*** glibc detected *** double free or corruption (out): 0x080993a0 ***
Aborted



Thanks.

 JEB



-- System Information:
Debian Release: 4.0
 APT prefers testing
 APT policy: (900, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.4.32
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)

Versions of packages echoping depends on:
ii  libc6                        2.3.6.ds1-8 GNU C Library: Shared libraries
ii libgnutls13 1.4.4-3 the GNU TLS library - runtime libr ii libidn11 0.6.5-1 GNU libidn library, implementation

echoping recommends no packages.

-- no debconf information

--
James Bromberger, Lead Systems Administrator, Vibrant Media
Direct Telephone: UK +44 20 7239 0103, USA +1 646 688 0453
Mobile/Cell: +44 791 778 0554
London, UK Office: UK +44 20 7239 0103, USA +1 646 688 0450
London, UK Office Fax: UK +44 20 7278 9396
This email is intended for the exclusive use by the person(s) mentioned as 
recipient(s). This email and its attachments, if any, contain confidential 
information and/or may contain information protected by intellectual property 
rights or others rights. This email does not constitute any commitment from 
Vibrant Media or its subsidiaries except when expressly agreed in a written 
agreement between the intended recipient and Vibrant Media or its subsidiaries. 
If you receive this email by mistake, please notify the sender and delete this 
email immediately from your system and destroy all copies of it. You may not, 
directly or indirectly, use, disclose, distribute, print or copy this email or 
any part of it if you are not the intended recipient.
begin:vcard
fn:James Bromberger
n:Bromberger;James
org:Vibrant Media
adr:140 Aldersgate Street;;7th floor;London;;EC1A 4HY;United Kingdom
email;internet:[EMAIL PROTECTED]
tel;work:+44 20 7239 0103
tel;fax:+44 20 7278 9396
tel;cell:+44 791 778 0554
note;quoted-printable:London office: +44 20 7239 0120=0D=0A=
	New York, USA to the UK Office: +1 646 688 0450=0D=0A=
	New York, USA direct to me in the UK: +1 646 688 0453=0D=0A=
	
x-mozilla-html:FALSE
url:http://www.vibrantmedia.com/
version:2.1
end:vcard

Reply via email to