Bug#704653: apt: segfault with http sources whose name contains '['

[Tzafrir Cohen <tzafrir@debian.org>]

Package: apt
Version: 0.9.7.8
Severity: minor

Issue also reproduced with the package in experimental: 0.9.7.9~exp2

I accidentally wrote a sources.list line that contained a ']' character.

I expect 'apt-get update' to fail to resolve the host name and fail in
one way or another. Instead, apt-get just segfailts.

An example sources.list file:

deb http://ftp.us.debian.org/debian sid main
deb http://hostname[ whatever

# apt-get update
Segmentation fault

# aptitude update
Segmentation fault

# apt-cache search apt
Segmentation fault

-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=he_IL.utf8, LC_CTYPE=he_IL.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages apt depends on:
ii  debian-archive-keyring  2012.4
ii  gnupg                   1.4.12-7
ii  libapt-pkg4.12          0.9.7.8
ii  libc6                   2.13-38
ii  libgcc1                 1:4.7.2-5
ii  libstdc++6              4.7.2-5

apt recommends no packages.

Versions of packages apt suggests:
pn  apt-doc     <none>
ii  aptitude    0.6.8.2-1
ii  dpkg-dev    1.16.10
ii  python-apt  0.8.8.2
ii  synaptic    0.75.12
ii  xz-utils    5.1.1alpha+20120614-2

-- no debconf information