Bug#774159: elinks: "Out of memory" in infinite(?) loop

[Jakub Wilk]

Package: elinks
Version: 0.12~pre6-5+b2
Usertags: mangleme

$ ulimit -v 300000; elinks -dump oom.html
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:34: Out of 
memory (malloc returned NULL): retry #1/3, I still exercise my patience and 
retry tirelessly.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:34: Out of 
memory (malloc returned NULL): retry #2/3, I still exercise my patience and 
retry tirelessly.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:46: Out of 
memory (malloc returned NULL) after 3 tries, I give up and try to continue. 
Pray for me, please.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:34: Out of 
memory (malloc returned NULL): retry #1/3, I still exercise my patience and 
retry tirelessly.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:34: Out of 
memory (malloc returned NULL): retry #2/3, I still exercise my patience and 
retry tirelessly.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:46: Out of 
memory (malloc returned NULL) after 3 tries, I give up and try to continue. 
Pray for me, please.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:34: Out of 
memory (malloc returned NULL): retry #1/3, I still exercise my patience and 
retry tirelessly.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:34: Out of 
memory (malloc returned NULL): retry #2/3, I still exercise my patience and 
retry tirelessly.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:46: Out of 
memory (malloc returned NULL) after 3 tries, I give up and try to continue. 
Pray for me, please.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:34: Out of 
memory (malloc returned NULL): retry #1/3, I still exercise my patience and 
retry tirelessly.
ERROR at /build/elinks-_FsjFu/elinks-0.12~pre6/src/util/memory.c:34: Out of 
memory (malloc returned NULL): retry #2/3, I still exercise my patience and 
retry tirelessly.
[...and so on...]





This bug was found using the mangleme fuzzer:
http://lcamtuf.coredump.cx/soft/mangleme.tgz

-- System Information:
Debian Release: 8.0
 APT prefers unstable
 APT policy: (990, 'unstable'), (500, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages elinks depends on:
ii  elinks-data        0.12~pre6-5
ii  libbz2-1.0         1.0.6-7+b2
ii  libc6              2.19-13
ii  libcomerr2         1.42.12-1
ii  libexpat1          2.1.0-6+b3
ii  libfsplib0         0.11-2
ii  libgnutls-deb0-28  3.3.8-5
ii  libgpm2            1.20.4-6.1+b2
ii  libgssapi-krb5-2   1.12.1+dfsg-16
ii  libidn11           1.29-1+b2
ii  libk5crypto3       1.12.1+dfsg-16
ii  libkrb5-3          1.12.1+dfsg-16
ii  libperl5.20        5.20.1-4
ii  libtre5            0.8.0-4
ii  zlib1g             1:1.2.8.dfsg-2+b1

--
Jakub Wilk

I would expect that elinks actually give up after the third try, rather than try and fail to allocate memory over and over again.

oom.html.gz
Description: application/gzip