Package: wget
Version: 1.12-1.1
Severity: normal

i seem to have stumbled across a segmentation fault in wget.  If the
server omits the numeric HTTP response code in its reply, wget will
crash with a segfault.  You can try it:

  printf "HTTP/1.0  OK\r\nContent-Type: text/plain\r\n\r\n" | nc -l 1234 
>/dev/null &
  wget http://localhost:1234/

This also works without the Content-Type header.

While this server is clearly not returning valid HTTP, wget should
probably be better behaved than to segfault.

     --dkg

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-trunk-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages wget depends on:
ii  dpkg                      1.15.5.5       Debian package management system
ii  install-info              4.13a.dfsg.1-5 Manage installed documentation in 
ii  libc6                     2.10.2-2       GNU C Library: Shared libraries
ii  libssl0.9.8               0.9.8k-7       SSL shared libraries

wget recommends no packages.

wget suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to