I would like to draw some attention to this old Debian bug again.

The problem is still present on Debian buster and sid (lua-socket
3.0~rc1+git+ac3201d-4).
It can be reproduced by using lighttpd (webserver) and mod_magnet
(similar to lua cgi).

A very small script, which is just doing a plain HTTP request will SEGV
the server:

http = require("socket.http")

r, c = http.request {
        url = "https://tbspace.de";,
}

lighty.content = { r }
return 200

This is the backtrace of the issue: (screenshotted on a Debian sid/amd64
from 2020-02-10)
https://screenshot.tbspace.de/gqzldcawbnk.png

Thanks,
Tobias

Reply via email to