[Bug-wget] segfault in strlen() [was: Re: wget 1.17 segfaults under openSUSE 13.1 (x86_64; glibc 2.18)]

[Noël Köthe]

Hello,

Am Samstag, den 21.11.2015, 00:10 +0100 schrieb Darshit Shah:
> Another thing that I just remembered, this issue seems to pop up when
> the file 
> being downloaded already exists on disk. Maybe, that is why you're
> seeing the 
> different behaviour? 
> 
> Try downloading the file when it already exists and see if the
> problem can be 
> reproduced on the newer system.

I got the following wget 1.17 segfault bug report describing your
point: "wget segfault in strlen()

Starting program: /usr/bin/wget -N http://josm.openstreetmap.de/josm-latest.jar
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff6a2fc9a in strlen () from /lib/x86_64-linux-gnu/libc.so.6

Thread 1 (Thread 0x7ffff7fce780 (LWP 18282)):
#0  0x00007ffff6a2fc9a in strlen () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
#1  0x000055555557d7b7 in set_file_timestamp (hs=0x7fffffffdbf0) at http.c:2167
        filename_len = 140737488347680
        filename_plus_orig_suffix = 0x5555557f6a60 "josm-latest.jar"
        local_dot_orig_file_exists = false
        local_filename = 0x5555555997e4 <file_exists_p+58> 
"\367\320\301\350\037H\213M\370dH3\f%("
        st = {st_dev = 2054, st_ino = 9975482, st_nlink = 1, st_mode = 33188, 
          st_uid = 1000, st_gid = 1000, __pad0 = 0, st_rdev = 0, 
          st_size = 10362423, st_blksize = 4096, st_blocks = 20240, st_atim = {
            tv_sec = 1447884469, tv_nsec = 0}, st_mtim = {tv_sec = 1447814041, 
            tv_nsec = 0}, st_ctim = {tv_sec = 1447884469, 
            tv_nsec = 165141734}, __glibc_reserved = {0, 0, 0}}
#2  0x00005555555810bc in http_loop (u=0x555555812f30, 
    original_url=0x555555812f30, newloc=0x7fffffffdeb8, 
    local_file=0x7fffffffdec0, referer=0x0, dt=0x7fffffffdfc8, proxy=0x0, 
    iri=0x5555558130f0) at http.c:3888
        timestamp_err = 4137853056
        count = 0
        got_head = false
        time_came_from_head = false
        got_name = false
        tms = 0xd5c <error: Cannot access memory at address 0xd5c>
        tmrate = 0x11d <error: Cannot access memory at address 0x11d>
        err = 32767
        ret = TRYLIMEXC
        tmr = -1
        hstat = {len = 0, contlen = 0, restval = 0, res = 0, rderrmsg = 0x0, 
          newloc = 0x0, remote_time = 0x0, error = 0x0, statcode = 0, 
          message = 0x0, rd_size = 0, dltime = 0, referer = 0x0, 
          local_file = 0x0, existence_checked = false, 
          timestamp_checked = false, orig_file_name = 0x0, orig_file_size = 0, 
          orig_file_tstamp = 0}
        st = {st_dev = 140733193388032, st_ino = 2358, 
          st_nlink = 140737352679280, st_mode = 4141159968, st_uid = 32767, 
          st_gid = 22, __pad0 = 0, st_rdev = 93824992278048, 
          st_size = 140737488347680, st_blksize = 0, st_blocks = 0, st_atim = {
            tv_sec = 140737331241088, tv_nsec = 24}, st_mtim = {
            tv_sec = 140737488346992, tv_nsec = 140737488346384}, st_ctim = {
            tv_sec = 93824994994784, tv_nsec = 93824995110704}, 
          __glibc_reserved = {-6998084334733230058, 93824994995013, 
            93824994994784}}
        send_head_first = false
        file_name = 0x5555557f6a60 "josm-latest.jar"
        force_full_retrieve = false
#3  0x00005555555916d2 in retrieve_url (orig_parsed=0x555555812f30, 
    origurl=0x555555812fa0 "http://josm.openstreetmap.de/josm-latest.jar", 
    file=0x7fffffffdff8, newloc=0x7fffffffe000, refurl=0x0, dt=0x7fffffffdfc8, 
    recursive=false, iri=0x5555558130f0, register_status=true) at retr.c:817
        result = NOCONERROR
        url = 0x5555558131f0 "http://josm.openstreetmap.de/josm-latest.jar";
        location_changed = false
        iri_fallbacked = false
        dummy = 0
        mynewloc = 0x0
        proxy = 0x0
        u = 0x555555812f30
        proxy_url = 0x0
        up_error_code = 0
        local_file = 0x0
        redirection_count = 0
        method_suspended = false
        saved_body_data = 0x0
        saved_method = 0x0
        saved_body_file_name = 0x0
#4  0x000055555558a055 in main (argc=3, argv=0x7fffffffe228) at main.c:1860
        dt = 128
        url_err = 32767
        filename = 0x0
        redirected_URL = 0x0
        iri = 0x5555558130f0
        url_parsed = 0x555555812f30
        url = 0x7fffffffdf70
        t = 0x7fffffffdf70
        p = 0x555555812f24 ""
        i = 1
        ret = -1
        longindex = -1
        nurl = 1
        retconf = -1
        argstring_length = 55
        use_userconfig = false
        noconfig = false
        append_to_log = false
        timer = 0x555555812080
        start_time = 4,6100000000000001e-07
"

https://bugs.debian.org/805673

Regards

        Noël

signature.asc
Description: This is a digitally signed message part