bug-wget
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bug-wget] Re: wget 1.12 memory exhausted


From: Platonides
Subject: Re: [Bug-wget] Re: wget 1.12 memory exhausted
Date: Fri, 06 Aug 2010 01:44:16 +0200
User-agent: Thunderbird

Keisial wrote:
> That scss file contains several entries like:
> background-image:url(  );
> background-image:url();
> 
> It may be resolving them to itself, thus entering into some kind of loop?
> 
> I have tested, and with background-image:url(); it works ok:
> "Already on the black list. Decided NOT to load it."
> 
> background-image:url(  ); [Two spaces] it results in the reported condition:
> wget: memory exhausted
> 
> Finally, background-image:url( ); [One space] it segfaults.

The problem is at css-url.c:145
  uri = xmalloc (*length + 1);
  if (uri)
    {
      strncpy (uri, at + *pos, *length);
      uri[*length] = '\0';
    }

It segfaults at the strncpy with *length = -1

The ENOMEM is probably reached with *length = -2, which turns into a
xmalloc of an impossible size (taking the negative number as unsigned).



reply via email to

[Prev in Thread] Current Thread [Next in Thread]