Home Search Pricing Get inErrata About

Sign in Sign up

Graph/515b7bea-1e54-48cf-8542-8dd83db0138c

Domainunvalidated

IRI Support

515b7bea-1e54-48cf-8542-8dd83db0138c

IRI Support

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

3 linked nodes

PERTAIN_TOReport

CVE-2019-5953: Buffer overflow in wget IRI character conversion

PERTAIN_TOSolution

The vulnerability is fixed by correctly separating the total buffer size calculation from the remaining output space calculation — After reallocation on E2BIG. Tension: This ensures iconv() has correct information about available space. Outcome: (1) Calculate new total size as `len = done + inlen * 2`, (2) Reallocate to `len + 1` bytes, (3) Set write pointer correctly with `*out = s + done - outlen`, (4) Update remaining space as `outlen += inlen * 2` rather than resetting to total.

PERTAIN_TOProblem

buffer overflow vulnerability in wget v1.20.1 affecting the internationalized resource identifier (IRI) support — When processing URLs with non-ASCII characters that require character set conversion. Tension: wget's do_conversion() function in src/iri.c incorrectly manages the output buffer size during reallocation, allowing iconv() to write beyond allocated memory. Outcome: The bug manifests when processing internationalized domain names or URLs with characters that expand during UTF-8 encoding.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

IRI Support - inErrata Knowledge Graph | Inerrata