polipo     5646          proxy  661u     sock                0,6       0t0 3066108598 can't identify protocol
polipo     5646          proxy  663u     sock                0,6       0t0 3066489338 can't identify protocol
polipo     5646          proxy  666u     sock                0,6       0t0 3064968353 can't identify protocol
polipo     5646          proxy  667u     sock                0,6       0t0 3064968355 can't identify protocol
polipo     5646          proxy  670u     sock                0,6       0t0 3063258367 can't identify protocol
polipo     5646          proxy  675u     sock                0,6       0t0 3064970332 can't identify protocol
…

Cache-Control: no-cache, no-store, must-revalidate
Etag: <buggy-etag>
Expire: <in the past>

% git clone http://git.savannah.gnu.org/r/gnulib.git
Cloning into 'gnulib'...
remote: Counting objects: 160407, done.
remote: Compressing objects: 100% (24057/24057), done.
error: RPC failed; result=18, HTTP code = 200 MiB | 3.47 MiB/s     
fatal: The remote end hung up unexpectedly
fatal: early EOF
fatal: index-pack failed

Established listening socket on port 3128.
Parsed URL http://git.savannah.gnu.org/r/gnulib.git/info/refs?service=git-upload-pack: rc=0, x=7, y=27
Uncacheable object http://git.savannah.gnu.org/r/gnulib.git/info/refs?service=git-upload-pack (66)
Parsed URL http://git.savannah.gnu.org/r/gnulib.git/git-upload-pack: rc=0, x=7, y=27
Uncacheable object http://git.savannah.gnu.org/r/gnulib.git/git-upload-pack (66)
Short on chunk memory -- attempting to punch holes in the middle of objects.
Short on chunk memory -- attempting to punch holes in the middle of objects.
Short on chunk memory -- attempting to punch holes in the middle of objects.
Short on chunk memory -- attempting to punch holes in the middle of objects.
Short on chunk memory -- attempting to punch holes in the middle of objects.
Short on chunk memory -- attempting to punch holes in the middle of objects.
Read from server failed: Cannot allocate memory

while(string[i] != '\0' && i < n) {

# With proxy:
% curl -I http://a.fsdn.com/allura/nf/1415138103/_ew_/theme/sftheme/js/sftheme/header.js | sort

Age: 2138
Cache-Control: public, max-age=31382380
Connection: keep-alive
Content-Length: 706
Content-Type: application/x-javascript
Date: Thu, 06 Nov 2014 16:39:51 GMT
ETag: "1349976945.13-2193"
Expires: Wed, 04 Nov 2015 21:59:31 GMT
HTTP/1.1 200 OK
Last-Modified: Thu, 11 Oct 2012 17:35:45 GMT

# Without proxy:
% http_proxy= curl -I http://a.fsdn.com/allura/nf/1415138103/_ew_/theme/sftheme/js/sftheme/header.js | sort

Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31380236
Connection: keep-alive
Content-Type: application/x-javascript
Date: Thu, 06 Nov 2014 17:15:35 GMT
ETag: "1349976945.13-2193"
Expires: Wed, 04 Nov 2015 21:59:31 GMT
HTTP/1.1 200 OK
Last-Modified: Thu, 11 Oct 2012 17:35:45 GMT
Server: nginx
X-Frame-Options: SAMEORIGIN

Access-Control-Allow-Origin: *
Age: 71
Cache-Control: public, max-age=31379019
Connection: keep-alive
Content-Length: 2193
Content-Type: application/x-javascript
Date: Thu, 06 Nov 2014 17:36:47 GMT
ETag: "1360348568.16-2193"
Expires: Wed, 04 Nov 2015 22:00:26 GMT
HTTP/1.1 200 OK
Last-Modified: Fri, 08 Feb 2013 18:36:08 GMT
Server: nginx
X-Frame-Options: SAMEORIGIN

[dmig@my-router polipo]$ sudo gdb --args polipo -c /opt/etc/polipo/config
GNU gdb (GDB) 7.3.1
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "mipsel-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /opt/sbin/polipo...done.
(gdb) run
Starting program: /opt/sbin/polipo -c /opt/etc/polipo/config

Program received signal SIGSEGV, Segmentation fault.
0x004363f0 in httpServerFinish (connection=0x4975e0, s=1, offset=0) at server.c:1266
1266        connection->server->time = current_time.tv_sec;
(gdb) bt
#0  0x004363f0 in httpServerFinish (connection=0x4975e0, s=1, offset=0) at server.c:1266
#1  0x004369e0 in httpServerDelayedFinishHandler (event=0x499638) at server.c:1342
#2  0x00406a18 in runTimeEventQueue () at event.c:492
#3  0x0040722c in eventLoop () at event.c:654
#4  0x0041dfb0 in main (argc=3, argv=0x7fff6d74) at main.c:165

# Sample configuration file for Polipo. -*-sh-*-

# You should not need to use a configuration file; all configuration
# variables have reasonable defaults.  If you want to use one, you
# can copy this to /etc/polipo/config or to ~/.polipo and modify.

# This file only contains some of the configuration variables; see the
# list given by ``polipo -v'' and the manual for more.

daemonise = true
pidFile = "/tmp/var/run/polipo.pid"

logFile = "/opt/var/log/polipo"

### Basic configuration
### *******************

# Uncomment one of these if you want to allow remote clients to
# connect:

# proxyAddress = "::0"        # both IPv4 and IPv6
proxyAddress = "0.0.0.0"    # IPv4 only

# If you do that, you'll want to restrict the set of hosts allowed to
# connect:

allowedClients = 127.0.0.1, 192.168.1.0/24
# allowedClients = "127.0.0.1, 134.157.168.0/24"

# Uncomment this if you want your Polipo to identify itself by
# something else than the host name:

# proxyName = "polipo.example.org"

# Uncomment this if there's only one user using this instance of Polipo:

# cacheIsShared = false

# Uncomment this if you want to use a parent proxy:

# parentProxy = "squid.example.org:3128"

# Uncomment this if you want to use a parent SOCKS proxy:

# socksParentProxy = "localhost:9050"
# socksProxyType = socks5


### Memory
### ******

# Uncomment this if you want Polipo to use a ridiculously small amount
# of memory (a hundred C-64 worth or so):

# chunkHighMark = 819200
# objectHighMark = 128

# Uncomment this if you've got plenty of memory:

# chunkHighMark = 50331648
# objectHighMark = 16384


### On-disk data
### ************

# Uncomment this if you want to disable the on-disk cache:

# diskCacheRoot = ""

# Uncomment this if you want to put the on-disk cache in a
# non-standard location:

diskCacheRoot = "/opt/var/cache/polipo"

# Uncomment this if you want to disable the local web server:

localDocumentRoot = ""

# Uncomment this if you want to enable the pages under /polipo/index?
# and /polipo/servers?.  This is a serious privacy leak if your proxy
# is shared.

# disableIndexing = false
# disableServersList = false

diskCacheTruncateTime = 30d
diskCacheUnlinkTime = 90d
diskCacheTruncateSize = 256MB

### Domain Name System
### ******************

# Uncomment this if you want to contact IPv4 hosts only (and make DNS
# queries somewhat faster):

# dnsQueryIPv6 = no

# Uncomment this if you want Polipo to prefer IPv4 to IPv6 for
# double-stack hosts:

# dnsQueryIPv6 = reluctantly

# Uncomment this to disable Polipo's DNS resolver and use the system's
# default resolver instead.  If you do that, Polipo will freeze during
# every DNS query:

# dnsUseGethostbyname = yes


### HTTP
### ****

# Uncomment this if you want to enable detection of proxy loops.
# This will cause your hostname (or whatever you put into proxyName
# above) to be included in every request:

# disableVia=false

# Uncomment this if you want to slightly reduce the amount of
# information that you leak about yourself:

# censoredHeaders = from, accept-language
# censorReferer = maybe

# Uncomment this if you're paranoid.  This will break a lot of sites,
# though:

# censoredHeaders = set-cookie, cookie, cookie2, from, accept-language
# censorReferer = true

# Uncomment this if you want to use Poor Man's Multiplexing; increase
# the sizes if you're on a fast line.  They should each amount to a few
# seconds' worth of transfer; if pmmSize is small, you'll want
# pmmFirstSize to be larger.

# Note that PMM is somewhat unreliable.

# pmmFirstSize = 16384
# pmmSize = 8192

# Uncomment this if your user-agent does something reasonable with
# Warning headers (most don't):

# relaxTransparency = maybe

# Uncomment this if you never want to revalidate instances for which
# data is available (this is not a good idea):

# relaxTransparency = yes

# Uncomment this if you have no network:

# proxyOffline = yes

# Uncomment this if you want to avoid revalidating instances with a
# Vary header (this is not a good idea):

# mindlesslyCacheVary = true

==5475== Memcheck, a memory error detector
==5475== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==5475== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==5475== Command: /home/ghost/local/src/polipo/polipo -c /home/ghost/local/src/polipo-test/polipo.conf forbiddenFile=/home/ghost/local/src/polipo-test/forbidden forbiddenTunnelsFile=Tunnels
==5475== 
==5475== Invalid read of size 8
==5475==    at 0x428A79: httpServerDirectHandlerCommon (server.c:2597)
==5475==    by 0x428F06: httpServerDirectHandler2 (server.c:2681)
==5475==    by 0x406E9F: do_scheduled_stream (io.c:245)
==5475==    by 0x405E71: pokeFdEventHandler (event.c:569)
==5475==    by 0x405C12: runTimeEventQueue (event.c:492)
==5475==    by 0x4060BA: eventLoop (event.c:654)
==5475==    by 0x4151CF: main (main.c:167)
==5475==  Address 0x52574c8 is 24 bytes inside a block of size 120 free'd
==5475==    at 0x4C27D4E: free (vg_replace_malloc.c:427)
==5475==    by 0x424FA4: httpServerFinish (server.c:1315)
==5475==    by 0x4254E2: httpServerRestart (server.c:1461)
==5475==    by 0x42622F: httpServerHandler (server.c:1742)
==5475==    by 0x406E9F: do_scheduled_stream (io.c:245)
==5475==    by 0x405E71: pokeFdEventHandler (event.c:569)
==5475==    by 0x405C12: runTimeEventQueue (event.c:492)
==5475==    by 0x4060BA: eventLoop (event.c:654)
==5475==    by 0x4151CF: main (main.c:167)
==5475== 
==5475== 
==5475== ---- Attach to debugger ? --- [Return/N/n/Y/y/C/c] ---- 
==5475== starting debugger with cmd: /usr/bin/gdb -nw /proc/5484/fd/1024 5484
GNU gdb (GDB) 7.4.1-debian
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /proc/5484/fd/1024...done.
Attaching to program: /proc/5484/fd/1024, process 5484
Reading symbols from /usr/lib/valgrind/vgpreload_core-amd64-linux.so...Reading symbols from /usr/lib/debug/usr/lib/valgrind/vgpreload_core-amd64-linux.so...done.
done.
Loaded symbols for /usr/lib/valgrind/vgpreload_core-amd64-linux.so
Reading symbols from /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so...Reading symbols from /usr/lib/debug/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so...done.
done.
Loaded symbols for /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so
Reading symbols from /lib/x86_64-linux-gnu/libc.so.6...Reading symbols from /usr/lib/debug/lib/x86_64-linux-gnu/libc-2.13.so...done.
done.
Loaded symbols for /lib/x86_64-linux-gnu/libc.so.6
Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib64/ld-linux-x86-64.so.2
Reading symbols from /lib/x86_64-linux-gnu/libnss_files.so.2...Reading symbols from /usr/lib/debug/lib/x86_64-linux-gnu/libnss_files-2.13.so...done.
done.
Loaded symbols for /lib/x86_64-linux-gnu/libnss_files.so.2
Failed to read a valid object file image from memory.
0x0000000000428a79 in httpServerDirectHandlerCommon (kind=2, status=-65540, event=0x52d6c40, srequest=0x52d6c60)
    at server.c:2597
2597        HTTPRequestPtr request = connection->request;
(gdb) bt
#0  0x0000000000428a79 in httpServerDirectHandlerCommon (kind=2, status=-65540, event=0x52d6c40, srequest=0x52d6c60)
    at server.c:2597
#1  0x0000000000428f07 in httpServerDirectHandler2 (status=-65540, event=0x52d6c40, srequest=0x52d6c60)
    at server.c:2681
#2  0x0000000000406ea0 in do_scheduled_stream (status=-65540, event=0x52d6c40) at io.c:245
#3  0x0000000000405e72 in pokeFdEventHandler (tevent=0x52d6e20) at event.c:569
#4  0x0000000000405c13 in runTimeEventQueue () at event.c:492
#5  0x00000000004060bb in eventLoop () at event.c:654
#6  0x00000000004151d0 in main (argc=5, argv=0x7ff000238) at main.c:167
(gdb) p *connection
$1 = {flags = 0, fd = -1, buf = 0x0, len = 0, offset = 932, request = 0x0, request_last = 0x0, serviced = 4, 
  version = 1, time = 1444809708, timeout = 0x0, te = 0, reqbuf = 0x0, reqlen = 27044, reqbegin = 0, reqoffset = 0, 
  bodylen = -1, reqte = 0, chunk_remaining = -1, server = 0x52571c0, pipelined = 0, connecting = 0}
(gdb) p sizeof(*connection)
$2 = 120

Unsupported Cache-Control directive post-check -- ignored.
Unsupported Cache-Control directive pre-check -- ignored.
Unsupported Cache-Control directive post-check -- ignored.
Unsupported Cache-Control directive pre-check -- ignored.
Assertion failed: (i >= 0), function lockChunk, file object.c, line 318.
Abort trap: 6

proxyAddress = "127.0.0.1"
proxyPort = 8000

allowedClients = 127.0.0.1
allowedPorts = 1-65535

proxyName = "localhost"

cacheIsShared = false
# daemonize = true


socksParentProxy = "localhost:9888"
socksProxyType = socks5

# disableLocalInterface = true
# disableConfiguration = true
localDocumentRoot=/Users/tlc/polipo

scrubLogs = true

at event.c:517

at main.c:165

--- client.c.orig       2014-05-14 23:19:43.000000000 +0100
+++ client.c    2014-07-31 22:23:04.000000000 +0100
@@ -738,7 +738,7 @@
     connection->reqbegin = i;

     if(body_len < 0) {
-        if(request->method == METHOD_GET || request->method == METHOD_HEAD)
+        if(request->method == METHOD_GET || request->method == METHOD_HEAD || request->method == METHOD_POST)
             body_len = 0;
     }
     connection->bodylen = body_len;

$ curl -si --proxy http://localhost:8123 httpbin.org/delay/5 | head
HTTP/1.1 200 OK
Content-Length: 262
Date: Sat, 30 Jan 2016 13:09:00 GMT
Via: 1.1 polipo
Server: nginx
Content-Type: application/json
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Age: 5
Connection: keep-alive

Couldn't parse ETag.

Go to ipid.shat.net. It should show you an address that you've never heard about.

> Error: CSS did not load.
This may happen on the first request due to CSS mimetype issues. Try clearing your browser cache and refreshing.

Vary header present (Accept-Encoding, User-Agent).
Uncacheable object http://sourceforge.net/p/tmux/tmux-code/ci/master/tree/ (2562)
Superseding object http://sourceforge.net/p/tmux/tmux-code/ci/master/tree/ (200 22492 -1 (none) -> 200 22487 -1 (none))
Superseding object http://fonts.googleapis.com/css?family=Ubuntu:regular (200 192 -1 (none) -> 200 192 -1 (none))
Vary header present (Accept-Encoding).
Superseding object http://consent-st.truste.com/get?name=notice.js&domain=slashdot.org&c=teconsent&text=true (200 4433 -1 (none) -> 200 -1 -1 (none))
Vary header present (Accept-Encoding).
Superseding object http://www.google-analytics.com/ga.js (200 16063 1412297322 (none) -> 200 16063 1412297322 (none))
Vary header present (Accept-Encoding).
Superseding object http://consent-st.truste.com/get?name=cmapi.module.js (200 5415 -1 (none) -> 200 -1 -1 (none))
Unsupported Cache-Control directive post-check -- ignored.
Unsupported Cache-Control directive pre-check -- ignored.
Vary header present (Accept-Encoding).
Uncacheable object http://consent.truste.com/notice?js=1&name=notice.js&domain=slashdot.org&c=teconsent&text=true (606)
Superseding object http://consent.truste.com/notice?js=1&name=notice.js&domain=slashdot.org&c=teconsent&text=true (200 1128 -1 (none) -> 200 1129 -1 (none))
Uncacheable object http://www.google-analytics.com/… (138)
Uncacheable object http://www.google-analytics.com/… (138)
Vary header present (Accept-Encoding).
Superseding object http://consent-st.truste.com/get?name=notice2.js (200 6266 -1 (none) -> 200 -1 -1 (none))
Unsupported Cache-Control directive post-check -- ignored.
Unsupported Cache-Control directive pre-check -- ignored.
Uncacheable object http://consent.truste.com/noticemsg?action=returns&domain=slashdot.org&behavior=expressed&country=de&language=en&rand=0.8105680911821955 (94)
Uncacheable object http://sourceforge.net/log/webtracker/?event_id=…&project=tmux&action_type=git&url=http%3A%2F%2Fsourceforge.net%2Fp%2Ftmux%2Ftmux-code%2Fci%2Fmaster%2Ftree%2F&referer= (2)

logFile = /var/log/polipo/polipo.log
diskCacheRoot = /var/spool/polipo
proxyPort = 3128
logLevel = 0xFF

disableIndexing = false
disableServersList = false

# max. open file handles
maxDiskEntries = 64

dontTrustVaryETag = true
dontCacheCookies = true
dontCacheRedirects = true

% wget http://a.fsdn.com/allura/nf/1415138103/_ew_/theme/sftheme/js/sftheme/header.js -S
--2014-11-06 17:42:14--  http://a.fsdn.com/allura/nf/1415138103/_ew_/theme/sftheme/js/sftheme/header.js
Resolving localhost (localhost)... 127.0.0.1
Connecting to localhost (localhost)|127.0.0.1|:3128... connected.
Proxy request sent, awaiting response...
  HTTP/1.1 200 OK
  Content-Length: 706
  ETag: "1349976945.13-2193"
  Date: Thu, 06 Nov 2014 16:39:51 GMT
  Last-Modified: Thu, 11 Oct 2012 17:35:45 GMT
  Expires: Wed, 04 Nov 2015 21:59:31 GMT
  Cache-Control: public, max-age=31382380
  Content-Type: application/x-javascript
  Age: 143
  Connection: keep-alive
Length: 706 [application/x-javascript]
Saving to: ‘header.js.1’

2014-11-06 17:42:14 (42,9 MB/s) - ‘header.js.1’ saved [706/706]

% http_proxy= wget http://a.fsdn.com/allura/nf/1415138103/_ew_/theme/sftheme/js/sftheme/header.js -S
--2014-11-06 17:42:36--  http://a.fsdn.com/allura/nf/1415138103/_ew_/theme/sftheme/js/sftheme/header.js
Resolving a.fsdn.com (a.fsdn.com)... 23.63.115.172
Connecting to a.fsdn.com (a.fsdn.com)|23.63.115.172|:80... connected.
HTTP request sent, awaiting response...
  HTTP/1.1 200 OK
  Server: nginx
  Content-Type: application/x-javascript
  Access-Control-Allow-Origin: *
  ETag: "1360348568.16-2193"
  Last-Modified: Fri, 08 Feb 2013 18:36:08 GMT
  X-Frame-Options: SAMEORIGIN
  Cache-Control: public, max-age=31382270
  Expires: Wed, 04 Nov 2015 22:00:26 GMT
  Date: Thu, 06 Nov 2014 16:42:36 GMT
  Content-Length: 2193
  Connection: keep-alive
Length: 2193 (2,1K) [application/x-javascript]
Saving to: ‘header.js.2’

% file header.js.*
header.js.1: gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
header.js.2: ASCII text

HTTP/1.1 200 OK
Content-Length: 706
ETag: "1349976945.13-2193"
Date: Thu, 06 Nov 2014 16:39:51 GMT
Last-Modified: Thu, 11 Oct 2012 17:35:45 GMT
Expires: Wed, 04 Nov 2015 21:59:31 GMT
Cache-Control: public, max-age=31382380
Content-Type: application/x-javascript
X-Polipo-Location: http://a.fsdn.com/allura/nf/1415138103/_ew_/theme/sftheme/js/sftheme/header.js
X-Polipo-Access: Thu, 06 Nov 2014 16:42:14 GMT

^_<8B>^H^@^@^@^@^@^@^@<9D…

static int
httpServerContinueConditionHandler(int status, ConditionHandlerPtr chandler)
{
    HTTPConnectionPtr connection = *(HTTPConnectionPtr*)chandler->data;

    if (connection)
    {
        if (!connection->request)
        {
            do_log(L_ERROR, "%s(%d): Null Request\n", __FUNCTION__, __LINE__);
            return 0;
        }
    }
    else
    {
        do_log(L_ERROR, "%s(%d): Null Connection\n", __FUNCTION__, __LINE__);
        return 0;
    }

    if(connection->request->flags & REQUEST_WAIT_CONTINUE)
        return 0;
    httpServerDelayedDoSide(connection);
    return 1;
}

Warning: 110 polipo:8123 Object is stale

[dmig@my-router polipo]$ sudo gdb --args polipo -c /opt/etc/polipo/config
GNU gdb (GDB) 7.3.1
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "mipsel-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /opt/sbin/polipo...done.
(gdb) run
Starting program: /opt/sbin/polipo -c /opt/etc/polipo/config
[Inferior 1 (process 5876) exited normally]
(gdb) ^Z[1]+  Stopped                    sudo gdb --args polipo -c /opt/etc/polipo/config
[dmig@my-router polipo]$ ps | grep polipo
 5874 admin     8224 2    gdb --args polipo -c /opt/etc/polipo/config
 5879 admin     1404 S    /opt/sbin/polipo -c /opt/etc/polipo/config
 5881 dmig       884 R    grep polipo
[dmig@my-router polipo]$ fg
sudo gdb --args polipo -c /opt/etc/polipo/config

(gdb) attach 5879
Attaching to program: /opt/sbin/polipo, process 5879
Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /lib/libc.so.0...(no debugging symbols found)...done.
Loaded symbols for /lib/libc.so.0
Reading symbols from /lib/ld-uClibc.so.0...(no debugging symbols found)...done.
Loaded symbols for /lib/ld-uClibc.so.0
0x77f624fc in poll () from /lib/libc.so.0
(gdb) continue 
Continuing.

Program received signal SIGABRT, Aborted.
0x77fae964 in raise () from /lib/libc.so.0
(gdb) bt
#0  0x77fae964 in raise () from /lib/libc.so.0
#1  0x77fa8064 in abort () from /lib/libc.so.0
#2  0x77f65888 in __assert () from /lib/libc.so.0
#3  0x00435bd4 in httpServerFinish (connection=0x4945f0, s=1, offset=0) at server.c:1171
#4  0x004369e0 in httpServerDelayedFinishHandler (event=0x495d08) at server.c:1342
#5  0x00406a18 in runTimeEventQueue () at event.c:492
#6  0x0040722c in eventLoop () at event.c:654
#7  0x0041dfb0 in main (argc=3, argv=0x7fff6d74) at main.c:165
(gdb)

% python2 -c 'import urllib; r = urllib.urlretrieve("https://www.example.com/"); print(file(r[0]).read())'<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html><head>
<title>Proxy error: 400 Couldn't parse URL.</title>
</head><body>
<h1>400 Couldn't parse URL</h1>
<p>The following error occurred while trying to access <strong>https://www.example.com/</strong>:<br><br>
<strong>400 Couldn't parse URL</strong></p>
<hr>Generated Tue, 03 Mar 2015 13:11:53 CET by Polipo on <em>localhost:3128</em>.
</body></html>

diff --git a/tunnel.c b/tunnel.c
index e1e1e62..9efb656 100644
--- a/tunnel.c
+++ b/tunnel.c
@@ -174,7 +174,7 @@ do_tunnel(int fd, char *buf, int offset, int len, AtomPtr url)
     if (tunnelIsMatched(url->string, url->length, 
            tunnel->hostname->string, tunnel->hostname->length)) {
         releaseAtom(url);
-        tunnelError(tunnel, 404, internAtom("Forbidden tunnel"));
+        tunnelError(tunnel, 403, internAtom("Forbidden tunnel"));
    logTunnel(tunnel,1);
         return;
     }