GNOME Bugzilla – Bug 785042
Invalid read in soup_uri_new when URI ends in /..
Last modified: 2017-08-07 14:00:59 UTC
Specifically, if a URI is simplifed within soup such that the path is /.., soup appears to walk backwards beyond the start of a buffer. We can see this happen under valgrind by trying to normalize http://www.google.com/.. 7 ==11802== Invalid read of size 1 8 ==11802== at 0x300A282C2B: soup_uri_new_with_base (in /usr/lib64/libsoup-2.4.so.1.8.0) 9 ==11802== by 0x300A2829EA: soup_uri_new_with_base (in /usr/lib64/libsoup-2.4.so.1.8.0) 10 ==11802== by 0x300A283331: soup_uri_new (in /usr/lib64/libsoup-2.4.so.1.8.0)
fixed in git. Thanks for the bug report.