Bug 1099680 - [abrt] wget: digest_authentication_encode(): wget killed by SIGSEGV
Summary: [abrt] wget: digest_authentication_encode(): wget killed by SIGSEGV
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: wget
Version: 20
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Tomáš Hozza
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:48938801777b5d6c2a825538c11...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-05-21 01:06 UTC by Arcadiy Ivanov
Modified: 2018-04-23 10:02 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2014-12-16 16:47:52 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (200.55 KB, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: cgroup (172 bytes, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: core_backtrace (1.51 KB, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: dso_list (1.83 KB, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: environ (4.40 KB, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: exploitable (82 bytes, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: limits (1.29 KB, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: maps (9.03 KB, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: open_fds (142 bytes, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: proc_pid_status (953 bytes, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details
File: var_log_messages (1.37 KB, text/plain)
2014-05-21 01:06 UTC, Arcadiy Ivanov
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1545310 1 None None None 2021-12-10 15:41:06 UTC

Internal Links: 1545310

Description Arcadiy Ivanov 2014-05-21 01:06:08 UTC
Description of problem:
wget was invoked to retrieve a JBoss management authenticated URL.

wget -O - -T 1 -w 1 --user=admin '--password=password' http://localhost:9990/management
--2014-05-20 20:15:38--  http://localhost:9990/management
Resolving localhost (localhost)... ::1, 127.0.0.1
Connecting to localhost (localhost)|::1|:9990... failed: Connection refused.
Connecting to localhost (localhost)|127.0.0.1|:9990... connected.
HTTP request sent, awaiting response... 401 Unauthorized

Version-Release number of selected component:
wget-1.14-12.fc20

Additional info:
reporter:       libreport-2.2.2
backtrace_rating: 4
cmdline:        wget -O - -T 1 -w 1 --user=admin --password=password! http://localhost:9990/management
crash_function: digest_authentication_encode
executable:     /usr/bin/wget
kernel:         3.14.4-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (5 frames)
 #0 digest_authentication_encode at http.c:3729
 #1 create_authorization_line at http.c:3853
 #2 gethttp at http.c:2386
 #3 http_loop at http.c:3087
 #4 retrieve_url at retr.c:785

Comment 1 Arcadiy Ivanov 2014-05-21 01:06:12 UTC
Created attachment 897767 [details]
File: backtrace

Comment 2 Arcadiy Ivanov 2014-05-21 01:06:14 UTC
Created attachment 897768 [details]
File: cgroup

Comment 3 Arcadiy Ivanov 2014-05-21 01:06:16 UTC
Created attachment 897769 [details]
File: core_backtrace

Comment 4 Arcadiy Ivanov 2014-05-21 01:06:17 UTC
Created attachment 897770 [details]
File: dso_list

Comment 5 Arcadiy Ivanov 2014-05-21 01:06:19 UTC
Created attachment 897771 [details]
File: environ

Comment 6 Arcadiy Ivanov 2014-05-21 01:06:21 UTC
Created attachment 897772 [details]
File: exploitable

Comment 7 Arcadiy Ivanov 2014-05-21 01:06:23 UTC
Created attachment 897773 [details]
File: limits

Comment 8 Arcadiy Ivanov 2014-05-21 01:06:25 UTC
Created attachment 897774 [details]
File: maps

Comment 9 Arcadiy Ivanov 2014-05-21 01:06:27 UTC
Created attachment 897775 [details]
File: open_fds

Comment 10 Arcadiy Ivanov 2014-05-21 01:06:28 UTC
Created attachment 897776 [details]
File: proc_pid_status

Comment 11 Arcadiy Ivanov 2014-05-21 01:06:30 UTC
Created attachment 897777 [details]
File: var_log_messages

Comment 12 Tomáš Hozza 2014-12-16 16:47:52 UTC
The crash was on the line
3729	    if (!strcmp(qop,"auth"))
due to qop being NULL.

In the latest version of wget in all stable Fedora version the line is
if (qop != NULL && strcmp(qop,"auth"))
which means NULL pointer would be not used in the strcmp() call.

Closing as CURRENTRELEASE


Note You need to log in before you can comment on or make changes to this bug.