[pkg-lynx-maint] Bug#1119084: lynx: segfault on attempt to submit a form

[Thomas Dickey]

On Sun, Oct 26, 2025 at 06:38:31PM +0100, Thorsten Glaser wrote:
> Package: lynx
> Version: 2.9.2-1
> Severity: normal
> X-Debbugs-Cc: tg at mirbsd.de
> 
> g https://smartphone-dont-spy.de/list/
> 
> Go to one of the checkboxen, for example #23, check it,
> then : submit.

I need more detail to see how to exercise this.  #23 appears to be the
checkbox under

	Du interessierst dich für deine Sicherheit

and whether or not I move away from that checkbox, typing

	: submit

just gives me

	Edit the form's submit-URL:
 
(if that's the route to take, I can explore it with asan or valgrind...)

> It crashes with a segfault (dumps core), but not reliably.
> First and third try worked for me.
> 
> 
> -- System Information:
> Debian Release: 13.1
>   APT prefers stable-updates
>   APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'proposed-updates'), (500, 'stable')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 6.12.48+deb13-amd64 (SMP w/16 CPU threads; PREEMPT)
> Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
> Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
> Shell: /bin/sh linked to /usr/bin/dash
> Init: sysvinit (via /sbin/init)
> 
> Versions of packages lynx depends on:
> ii  libbrotli1      1.1.0-2+b7
> ii  libbsd0         0.12.2-2
> ii  libbz2-1.0      1.0.8-6
> ii  libc6           2.41-12
> ii  libgnutls30t64  3.8.9-3
> ii  libidn2-0       2.3.8-2
> ii  libncursesw6    6.5+20250216-2
> ii  libtinfo6       6.5+20250216-2
> ii  lynx-common     2.9.2-1
> ii  zlib1g          1:1.3.dfsg+really1.3.1-1+b1
> 
> Versions of packages lynx recommends:
> pn  mailcap  <none>
> 
> lynx suggests no packages.
> 
> -- no debconf information
> 

-- 
Thomas E. Dickey <dickey at invisible-island.net>
https://invisible-island.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-lynx-maint/attachments/20251026/113dc030/attachment-0001.sig>