This bug is easily reproduced:
Looks like there is no check to avoid overflowing glob->pattern in glob_set/glob_range (src/tool_urlglob.c).
Thanks for the report, this problem is now fixed in the git repository.
To try it out, you either checkout/update your git clone: http://curl.haxx.se/source.html
or you try tomorrow's daily snapshot: http://curl.haxx.se/snapshots/
Sign up for the SourceForge newsletter:
You seem to have CSS turned off.
Please don't fill out this field.