[Pkg-nagios-devel] Bug#1029934: check_http: realloc(): invalid next size when using chunked encoding

[Chris Boot]

Package: monitoring-plugins-basic
Version: 2.3.2-2
Severity: important

Dear maintainer,

Since the update to 2.3.2-2 (previously 2.3.2-1) one of my HTTP checks
has been failing:

$ /usr/lib/nagios/plugins/check_http -H www.bootc.net --ssl --sni 
realloc(): invalid next size
Aborted

When run in verbose mode it's clear that the site uses HTTP chunked
encoding, and this is potentially the cause of the problem.

Please go ahead and use the URI/hostname in my example above to help to
reproduce this bug.

Thanks,
Chris

-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing'), (100, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-2-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_DIE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages monitoring-plugins-basic depends on:
ii  iputils-ping               3:20221126-1
ii  libc6                      2.36-8
ii  libssl3                    3.0.7-2
ii  monitoring-plugins-common  2.3.2-2
ii  procps                     2:4.0.2-3
ii  ucf                        3.0043

Versions of packages monitoring-plugins-basic recommends:
ii  libcap2-bin  1:2.66-3

Versions of packages monitoring-plugins-basic suggests:
ii  icinga2  2.13.6-2

-- no debconf information