Bug#805673: wget: segfault in strlen()

[Nelson A. de Oliveira]

On Sat, Nov 21, 2015 at 12:44 PM, Noël Köthe  wrote:
> On the upstream mailing list this problem is already raised and
> commented:
>
> https://lists.gnu.org/archive/html/bug-wget/2015-11/msg00064.html

While we don't have a new wget release, could we have
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=218d81f6e5fb4f5ecd8db0fb2d9091ea509e0475
applied on Debian, please?

Thank you!

Best regards,
Nelson

Bug#805673: wget: segfault in strlen()

[Noël Köthe]

Control: tags -1 + upstream confirmed
Control: forwarded -1 
https://lists.gnu.org/archive/html/bug-wget/2015-11/msg00065.html

Am Freitag, den 20.11.2015, 18:56 -0200 schrieb Nelson A. de Oliveira:

Hello Nelson,

> Trying to use wget like this:
> 
> wget -N http://josm.openstreetmap.de/josm-latest.jar
> 
> In a dir where I already have a file named "josm-latest.jar" is
> causing
> a segfault in wget.
> 
> gdb's output with "thread apply all bt full" is attached.

Thank you for your detailed report.

On the upstream mailing list this problem is already raised and
commented:

https://lists.gnu.org/archive/html/bug-wget/2015-11/msg00064.html


Regards

Noël

signature.asc
Description: This is a digitally signed message part

Bug#805673: wget: segfault in strlen()

[Nelson A. de Oliveira]

Package: wget
Version: 1.17-1
Severity: important

Hi!

Trying to use wget like this:

wget -N http://josm.openstreetmap.de/josm-latest.jar

In a dir where I already have a file named "josm-latest.jar" is causing
a segfault in wget.

gdb's output with "thread apply all bt full" is attached.

Thank you!

Best regards,
Nelson

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (100, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages wget depends on:
ii  libc6  2.19-22
ii  libgnutls-deb0-28  3.3.18-1
ii  libidn11   1.32-3
ii  libnettle6 3.1.1-4
ii  libpcre3   2:8.35-7.4
ii  libpsl00.11.0-1
ii  libuuid1   2.27.1-1
ii  zlib1g 1:1.2.8.dfsg-2+b1

Versions of packages wget recommends:
ii  ca-certificates  20150426

wget suggests no packages.

-- no debconf information
Starting program: /usr/bin/wget -N http://josm.openstreetmap.de/josm-latest.jar
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x76a2fc9a in strlen () from /lib/x86_64-linux-gnu/libc.so.6

Thread 1 (Thread 0x77fce780 (LWP 18282)):
#0  0x76a2fc9a in strlen () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
#1  0x5557d7b7 in set_file_timestamp (hs=0x7fffdbf0) at http.c:2167
filename_len = 140737488347680
filename_plus_orig_suffix = 0x557f6a60 "josm-latest.jar"
local_dot_orig_file_exists = false
local_filename = 0x555997e4  
"\367\320\301\350\037H\213M\370dH3\f%("
st = {st_dev = 2054, st_ino = 9975482, st_nlink = 1, st_mode = 33188, 
  st_uid = 1000, st_gid = 1000, __pad0 = 0, st_rdev = 0, 
  st_size = 10362423, st_blksize = 4096, st_blocks = 20240, st_atim = {
tv_sec = 1447884469, tv_nsec = 0}, st_mtim = {tv_sec = 1447814041, 
tv_nsec = 0}, st_ctim = {tv_sec = 1447884469, 
tv_nsec = 165141734}, __glibc_reserved = {0, 0, 0}}
#2  0x555810bc in http_loop (u=0x55812f30, 
original_url=0x55812f30, newloc=0x7fffdeb8, 
local_file=0x7fffdec0, referer=0x0, dt=0x7fffdfc8, proxy=0x0, 
iri=0x558130f0) at http.c:3888
timestamp_err = 4137853056
count = 0
got_head = false
time_came_from_head = false
got_name = false
tms = 0xd5c 
tmrate = 0x11d 
err = 32767
ret = TRYLIMEXC
tmr = -1
hstat = {len = 0, contlen = 0, restval = 0, res = 0, rderrmsg = 0x0, 
  newloc = 0x0, remote_time = 0x0, error = 0x0, statcode = 0, 
  message = 0x0, rd_size = 0, dltime = 0, referer = 0x0, 
  local_file = 0x0, existence_checked = false, 
  timestamp_checked = false, orig_file_name = 0x0, orig_file_size = 0, 
  orig_file_tstamp = 0}
st = {st_dev = 140733193388032, st_ino = 2358, 
  st_nlink = 140737352679280, st_mode = 4141159968, st_uid = 32767, 
  st_gid = 22, __pad0 = 0, st_rdev = 93824992278048, 
  st_size = 140737488347680, st_blksize = 0, st_blocks = 0, st_atim = {
tv_sec = 140737331241088, tv_nsec = 24}, st_mtim = {
tv_sec = 140737488346992, tv_nsec = 140737488346384}, st_ctim = {
tv_sec = 93824994994784, tv_nsec = 93824995110704}, 
  __glibc_reserved = {-6998084334733230058, 93824994995013, 
93824994994784}}
send_head_first = false
file_name = 0x557f6a60 "josm-latest.jar"
force_full_retrieve = false
#3  0x555916d2 in retrieve_url (orig_parsed=0x55812f30, 
origurl=0x55812fa0 "http://josm.openstreetmap.de/josm-latest.jar;, 
file=0x7fffdff8, newloc=0x7fffe000, refurl=0x0, dt=0x7fffdfc8, 
recursive=false, iri=0x558130f0, register_status=true) at retr.c:817
result = NOCONERROR
url = 0x558131f0 "http://josm.openstreetmap.de/josm-latest.jar;
location_changed = false
iri_fallbacked = false
dummy = 0
mynewloc = 0x0
proxy = 0x0
u = 0x55812f30
proxy_url = 0x0
up_error_code = 0
local_file = 0x0
redirection_count = 0
method_suspended = false
saved_body_data = 0x0
saved_method = 0x0
saved_body_file_name = 0x0
#4  0x5558a055 in main (argc=3, argv=0x7fffe228) at main.c:1860
dt = 128
url_err = 32767
filename = 0x0
redirected_URL = 0x0
iri = 0x558130f0
url_parsed = 0x55812f30
url = 0x7fffdf70
t =