Bug 979580

Description of problem:
I was trying to perform a telnet nmap.org 80 | head -n 20. Then I ran a simple GET / HTTP/1.1 request there.

Version-Release number of selected component:
telnet-0.17-54.fc18

Additional info:
reporter:       libreport-2.1.4
backtrace_rating: 4
cmdline:        telnet nmap.org 80
crash_function: __longjmp
executable:     /usr/bin/telnet
kernel:         3.9.6-200.fc18.x86_64
runlevel:       N 5
uid:            1000

Truncated backtrace:
[New LWP 6656]
Core was generated by `telnet nmap.org 80'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007faddbde1b03 in __longjmp () at ../sysdeps/x86_64/__longjmp.S:34
34		PTR_DEMANGLE (%R9_LP)

Thread 1 (LWP 6656):
#0  0x00007faddbde1b03 in __longjmp () at ../sysdeps/x86_64/__longjmp.S:34
No locals.
Cannot access memory at address 0x7fff28d71f30
From                To                  Syms Read   Shared Object Library
0x00007faddc5b1f10  0x00007faddc5b2824  Yes         /lib64/libutil.so.1
0x00007faddc393d50  0x00007faddc3aaf88  Yes         /lib64/libncurses.so.5
0x00007faddc170e40  0x00007faddc17cdb8  Yes         /lib64/libtinfo.so.5
0x00007faddbdcb1a0  0x00007faddbf0ca10  Yes         /lib64/libc.so.6
0x00007faddbba8ed0  0x00007faddbba99f0  Yes         /lib64/libdl.so.2
0x00007faddc7b4b20  0x00007faddc7ce3d9  Yes         /lib64/ld-linux-x86-64.so.2
0x00007faddb99d1e0  0x00007faddb9a467c  Yes         /lib64/libnss_files.so.2
0x00007faddb798c40  0x00007faddb799860  Yes         /lib64/libnss_mdns4_minimal.so.2
0x00007faddb592100  0x00007faddb5958b4  Yes         /lib64/libnss_dns.so.2
0x00007faddb37ba30  0x00007faddb38a00c  Yes         /lib64/libresolv.so.2
$1 = 0x0
No symbol "__glib_assert_msg" in current context.
rax            0x0	0
rbx            0xffffffff	4294967295
rcx            0x10	16
rdx            0x7fff28d71f38	140733878574904
rsi            0x0	0
rdi            0x14	20
rbp            0x7faddcbf65e8	0x7faddcbf65e8 <tin>
rsp            0x7fff28d71f30	0x7fff28d71f30
r8             0x14	20
r9             0x10	16
r10            0x0	0
r11            0x246	582
r12            0x7fff28d720a0	140733878575264
r13            0x7faddcbf6610	140384709600784
r14            0x7faddcbf6614	140384709600788
r15            0xffffefff	4294963199
rip            0x7faddbde1b03	0x7faddbde1b03 <__longjmp+35>
eflags         0x10246	[ PF ZF IF RF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
Dump of assembler code for function __longjmp:
   0x00007faddbde1ae0 <+0>:	mov    0x30(%rdi),%r8
   0x00007faddbde1ae4 <+4>:	mov    0x8(%rdi),%r9
   0x00007faddbde1ae8 <+8>:	mov    0x38(%rdi),%rdx
   0x00007faddbde1aec <+12>:	ror    $0x11,%r8
   0x00007faddbde1af0 <+16>:	xor    %fs:0x30,%r8
   0x00007faddbde1af9 <+25>:	ror    $0x11,%r9
   0x00007faddbde1afd <+29>:	xor    %fs:0x30,%r9
   0x00007faddbde1b06 <+38>:	ror    $0x11,%rdx
   0x00007faddbde1b0a <+42>:	xor    %fs:0x30,%rdx
   0x00007faddbde1b13 <+51>:	nop
   0x00007faddbde1b14 <+52>:	mov    (%rdi),%rbx
   0x00007faddbde1b17 <+55>:	mov    0x10(%rdi),%r12
   0x00007faddbde1b1b <+59>:	mov    0x18(%rdi),%r13
   0x00007faddbde1b1f <+63>:	mov    0x20(%rdi),%r14
   0x00007faddbde1b23 <+67>:	mov    0x28(%rdi),%r15
   0x00007faddbde1b27 <+71>:	mov    %esi,%eax
   0x00007faddbde1b29 <+73>:	mov    %r8,%rsp
   0x00007faddbde1b2c <+76>:	mov    %r9,%rbp
   0x00007faddbde1b2f <+79>:	nop
   0x00007faddbde1b30 <+80>:	jmpq   *%rdx
End of assembler dump.