Bug#499945: Segfault in asn1_get_tag_der().

[Simon Josefsson]

Kurt Roeckx <kurt at roeckx.be> writes:

> When I run "lynx https://acrobat.com", I end up with a segfault.  The
> backtrace looks like:

Thanks for the report.  I'm trying to reproduce this but I can't.  I get
a question when I invoke the program:

SSL error:no issuer was found-Continue? (y) 

what did you answer?  Answering 'y' gives me an error and then lynx
quits:

jas at mocca:~$ lynx https://acrobat.com

Looking up acrobat.com
Making HTTPS connection to acrobat.com
Verified connection to acrobat.com (subj=acrobat.com)
Certificate issued by: 
Secure 256-bit TLS1.0 (RSA_AES_256_CBC_SHA1) HTTP connection
Sending HTTP request.
HTTP request sent; waiting for response.
Alert!: Unexpected network read error; connection aborted.
Can't Access `https://acrobat.com/'
Alert!: Unable to access document.

lynx: Can't access startfile 
jas at mocca:~$ 

Answering 'n' makes lynx abort as well:

jas at mocca:~$ lynx https://acrobat.com

Looking up acrobat.com
Making HTTPS connection to acrobat.com

lynx: Can't access startfile https://acrobat.com/
jas at mocca:~$ 

The server seems somewhat broken, I can't connect using 'gnutls-cli'
unless I force SSL3.0, and even then I just get a lot of Java JSP errors
back from the server, and then it shuts down the connection without
sending a TLS shutdown alert.

/Simon