Christoph Biedl wrote...

> This was fixed in 10-buster/sid (1.20), and the change is fairly
> simple, see attached patch. Please apply when convenient.

Upstream fix is
http://git.savannah.gnu.org/cgit/wget.git/commit/src/html-url.c?id=a2c4849900d1d5c7e5c273536ab0b8bbba9c1e54

| Fix crash on 'srcset' inline URIs
|
| * src/html-url.c (tag_handle_img): Check append_url() for NULL
|   return value before dereference.
|
| Crashed reproducable with parsing srcset="data:..." inline data.
| Reported-by: Coverity

Attachment: signature.asc
Description: PGP signature

Reply via email to