Package: elinks
Version: 0.13.2-1+b4
Severity: critical
Justification: breaks the whole system
X-Debbugs-Cc: user@thishost.mailname

Dear Maintainer,

"double free or corruption (fasttop)" in Elinks bookmark manager: writes 
infinite temporary file

Operating system and version:
user@debian:~$ uname -a
Linux debian 6.1.0-35-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.137-1 
(2025-05-07) x86_64 GNU/Linux

Elinks version:
user@debian:~$ elinks --version
ELinks 0.13.2

Debian package version:
$ dpkg -l|grep elinks
elinks                             0.13.2-1+b4 

Symptom:
System partition full when saving second bookmark in Elinks due to temporary 
file filling up partition
Error message:
"double free or corruption (fasttop)
Aborted"

Steps to reproduce:
Open a shell as a regular user.
Verify current disk usage:
user@debian:~$ df -h
Filesystem      Size  Used Avail Use% Mounted on
udev            1.9G     0  1.9G   0% /dev
tmpfs           392M  476K  392M   1% /run
/dev/sda1       9.8G  7.0G  2.4G  75% /
tmpfs           2.0G     0  2.0G   0% /dev/shm

Start elinks with a clean profile

user@debian:~$ elinks <enter>
press <enter> to discard 'Open URL' dialog
press <s> to open bookmark manager
press <tab> to navigate to 'Add' 
press <tab> to navigate to field Name and enter: foo
press <tab> to navigate to field Url and enter: http://foo.com
press <tab> to navigate to 'OK' and press <enter>
press <q> to exit the program

intermediate result: bookmark is saved.

Start elinks again to add a second bookmark:

user@debian:~$ elinks <enter>
press <enter> to discard 'Open URL' dialog
press <s> to open bookmark manager
press <tab> to navigate to 'Add' 
press <tab> to navigate to field Name and enter: bar
press <tab> to navigate to field Url and enter: http://bar.com
press <tab> to navigate to 'OK' and press <enter>

Expected result: 
a second bookmark is added and the dialog can be closed

Actual result:
- the screen becomes unresponsive.
- a temporary file is being written to the $HOME/.elinks directory until the 
partition runs out of space. 

user@debian:~$ ls -lah .elinks
total 2.4G
drwx------  2 user user 4.0K May 30 18:22 .
drwx------ 15 user user 4.0K May 27 13:29 ..
-rw-------  1 user user   26 May 30 18:21 bookmarks
-rw-------  1 user user 2.4G May 30 18:22 bookmarks.tmp_XCwkcT
-rw-------  1 user user    0 May 30 18:22 bookmarks.tmp_XyhrXm
-rw-------  1 user user    0 Feb 22 00:00 cookies
-rw-------  1 user user 1.2K May 30 17:51 elinks.conf
-rw-------  1 user user  408 Feb 22 00:00 globhist

The screen may become responsive again. When this happens:
press <tab> to navigate to 'Close' and press <enter>
press <q> to exit the program

The following message is printed to the console:
double free or corruption (fasttop)
Aborted

Disk usage at this point:
user@debian:~$ df -h
Filesystem      Size  Used Avail Use% Mounted on
udev            1.9G     0  1.9G   0% /dev
tmpfs           392M  476K  392M   1% /run
/dev/sda1       9.8G  9.3G     0 100% /
tmpfs           2.0G     0  2.0G   0% /dev/shm
tmpfs           5.0M     0  5.0M   0% /run/lock


-- System Information:
Debian Release: 12.11
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'stable'), (100, 'bookworm-fasttrack'), (100, 'bookworm-backports-staging')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-35-amd64 (SMP w/1 CPU thread; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages elinks depends on:
ii  elinks-data       0.13.2-1
ii  libbz2-1.0        1.0.8-5+b1
ii  libc6             2.36-9+deb12u10
ii  libev4            1:4.33-1
ii  libexpat1         2.5.0-1+deb12u1
ii  libfsplib0        0.14-5
ii  libgcrypt20       1.10.1-3
ii  libgnutls30       3.7.9-2+deb12u4
ii  libgpm2           1.20.7-10+b1
ii  libgssapi-krb5-2  1.20.1-2+deb12u3
ii  libidn12          1.41-1
ii  liblua5.1-0       5.1.5-9
ii  liblzma5          5.4.1-1
ii  libperl5.36       5.36.0-7+deb12u2
ii  libtinfo6         6.4-4
ii  libtre5           0.8.0-7

elinks recommends no packages.

Versions of packages elinks suggests:
pn  elinks-doc  <none>

-- no debconf information

Reply via email to