Bug 2010039 - [abrt] wget: find_cell(): wget killed by SIGSEGV
Summary: [abrt] wget: find_cell(): wget killed by SIGSEGV
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: wget
Version: 33
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Michal Ruprich
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:bf767b90eeffa41745b52411ae1...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-10-03 07:59 UTC by Silviu C.
Modified: 2021-10-29 23:10 UTC (History)
3 users (show)

Fixed In Version: wget-1.21.2-2.fc34 wget-1.21.2-2.fc33 wget-1.21.2-2.fc35
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-10-23 03:22:03 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)
File: backtrace (14.04 KB, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: core_backtrace (1.55 KB, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: cpuinfo (2.47 KB, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: dso_list (2.51 KB, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: environ (5.87 KB, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: exploitable (82 bytes, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: limits (1.29 KB, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: maps (15.72 KB, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: mountinfo (3.16 KB, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: open_fds (189 bytes, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
File: proc_pid_status (1.38 KB, text/plain)
2021-10-03 07:59 UTC, Silviu C. 		no flags Details
View All

Description Silviu C. 2021-10-03 07:59:37 UTC 
Description of problem:
I was running this command to download some legacy RedHat Linux ISOs:

wget -c http://archive.download.redhat.com/pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc1.iso http://archive.download.redhat.com/pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc2.iso http://archive.download.redhat.com/pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc3.iso
--2021-10-03 10:57:52--  http://archive.download.redhat.com/pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc1.iso
Resolving archive.download.redhat.com (archive.download.redhat.com)... 209.132.183.65
Connecting to archive.download.redhat.com (archive.download.redhat.com)|209.132.183.65|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: ftp://legacy.redhat.com//pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc1.iso [following]
--2021-10-03 10:57:52--  ftp://legacy.redhat.com//pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc1.iso
           => ‘valhalla-i386-disc1.iso’
Resolving legacy.redhat.com (legacy.redhat.com)... 209.132.183.65
Connecting to legacy.redhat.com (legacy.redhat.com)|209.132.183.65|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /pub/redhat/linux/7.3/en/iso/i386 ... done.
==> SIZE valhalla-i386-disc1.iso ... 668499968
File has already been retrieved.
2021-10-03 10:57:54 (0,00 B/s) - ‘valhalla-i386-disc1.iso’ saved [668499968]

--2021-10-03 10:57:54--  http://archive.download.redhat.com/pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc2.iso
Connecting to archive.download.redhat.com (archive.download.redhat.com)|209.132.183.65|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: ftp://legacy.redhat.com//pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc2.iso [following]
--2021-10-03 10:57:54--  ftp://legacy.redhat.com//pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc2.iso
           => ‘valhalla-i386-disc2.iso’
Connecting to legacy.redhat.com (legacy.redhat.com)|209.132.183.65|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /pub/redhat/linux/7.3/en/iso/i386 ... done.
==> SIZE valhalla-i386-disc2.iso ... 669319168
File has already been retrieved.
Segmentation fault (core dumped)

Version-Release number of selected component:
wget-1.21.1-2.fc33

Additional info:
reporter:       libreport-2.15.2
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/user/app.slice/app-org.gnome.Terminal.slice/vte-spawn-a32c2d63-8476-4214-9ecb-4d3f427024cb.scope
cmdline:        wget -c http://archive.download.redhat.com/pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc1.iso http://archive.download.redhat.com/pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc2.iso http://archive.download.redhat.com/pub/redhat/linux/7.3/en/iso/i386/valhalla-i386-disc3.iso
crash_function: find_cell
executable:     /usr/bin/wget
journald_cursor: s=2a74addf844b4ee9991027589954950e;i=12d2536;b=9d04212e091b4a32a131efe767c66367;m=a61ccc96;t=5cd6e1229796a;x=c26c82bf85b8894a
kernel:         5.13.19-100.fc33.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (6 frames)
 #0 find_cell at hash.c:321
 #1 hash_table_get at hash.c:340
 #2 downloaded_file at convert.c:1129
 #4 ftp_loop_internal at ftp.c:2037
 #5 ftp_loop at ftp.c:2847
 #6 retrieve_url at retr.c:999
Comment 1 Silviu C. 2021-10-03 07:59:41 UTC 
Created attachment 1828562 [details]
File: backtrace
Comment 2 Silviu C. 2021-10-03 07:59:42 UTC 
Created attachment 1828563 [details]
File: core_backtrace
Comment 3 Silviu C. 2021-10-03 07:59:43 UTC 
Created attachment 1828564 [details]
File: cpuinfo
Comment 4 Silviu C. 2021-10-03 07:59:44 UTC 
Created attachment 1828565 [details]
File: dso_list
Comment 5 Silviu C. 2021-10-03 07:59:45 UTC 
Created attachment 1828566 [details]
File: environ
Comment 6 Silviu C. 2021-10-03 07:59:46 UTC 
Created attachment 1828567 [details]
File: exploitable
Comment 7 Silviu C. 2021-10-03 07:59:47 UTC 
Created attachment 1828568 [details]
File: limits
Comment 8 Silviu C. 2021-10-03 07:59:48 UTC 
Created attachment 1828569 [details]
File: maps
Comment 9 Silviu C. 2021-10-03 07:59:50 UTC 
Created attachment 1828570 [details]
File: mountinfo
Comment 10 Silviu C. 2021-10-03 07:59:51 UTC 
Created attachment 1828571 [details]
File: open_fds
Comment 11 Silviu C. 2021-10-03 07:59:52 UTC 
Created attachment 1828572 [details]
File: proc_pid_status
Comment 12 Michal Ruprich 2021-10-04 11:12:52 UTC 
Hi Silviu,

thanks for filing this. This is quite interesting. If you don't use the -c, you get a completely different segfault:
#0  __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:45
#1  __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at pthread_kill.c:62
#2  0x00007f6a9d1e56b6 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#3  0x00007f6a9d1cf7d3 in __GI_abort () at abort.c:79
#4  0x00007f6a9d226a27 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7f6a9d3625f9 "%s\n")
    at ../sysdeps/posix/libc_fatal.c:155
#5  0x00007f6a9d23c74c in malloc_printerr (str=str@entry=0x7f6a9d3650f0 "free(): double free detected in tcache 2")
    at malloc.c:5543
#6  0x00007f6a9d23e67f in _int_free (av=0x7f6a9d39caa0 <main_arena>, p=0x55c3febfd220, have_lock=0) at malloc.c:4360
#7  0x00007f6a9d240ae5 in __GI___libc_free (mem=<optimized out>) at malloc.c:3278
#8  0x000055c3fcd26406 in main (argc=<optimized out>, argv=0x7fffecda52b8)
    at /usr/src/debug/wget-1.21.1-4.fc35.x86_64/src/main.c:2179
(gdb) f 8
#8  0x000055c3fcd26406 in main (argc=<optimized out>, argv=0x7fffecda52b8)
    at /usr/src/debug/wget-1.21.1-4.fc35.x86_64/src/main.c:2179

In this case the reused filename is garbled after retrieve_url function. Looking into this.
Comment 13 Fedora Update System 2021-10-15 14:34:22 UTC 
FEDORA-2021-952213f5f8 has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2021-952213f5f8
Comment 14 Fedora Update System 2021-10-15 14:34:22 UTC 
FEDORA-2021-25d5612d53 has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2021-25d5612d53
Comment 15 Fedora Update System 2021-10-15 19:10:41 UTC 
FEDORA-2021-a5bed798c8 has been pushed to the Fedora 34 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-a5bed798c8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-a5bed798c8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 16 Fedora Update System 2021-10-15 19:50:31 UTC 
FEDORA-2021-25d5612d53 has been pushed to the Fedora 33 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-25d5612d53`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-25d5612d53

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 17 Fedora Update System 2021-10-15 20:51:49 UTC 
FEDORA-2021-952213f5f8 has been pushed to the Fedora 35 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-952213f5f8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-952213f5f8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 18 Fedora Update System 2021-10-21 16:53:12 UTC 
FEDORA-2021-87a28cef21 has been pushed to the Fedora 34 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-87a28cef21`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-87a28cef21

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 19 Fedora Update System 2021-10-21 17:38:33 UTC 
FEDORA-2021-32d0a39c1a has been pushed to the Fedora 33 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-32d0a39c1a`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-32d0a39c1a

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 20 Fedora Update System 2021-10-21 19:08:09 UTC 
FEDORA-2021-a4a7e596f8 has been pushed to the Fedora 35 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-a4a7e596f8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-a4a7e596f8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 21 Fedora Update System 2021-10-23 03:22:03 UTC 
FEDORA-2021-87a28cef21 has been pushed to the Fedora 34 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 22 Fedora Update System 2021-10-28 19:31:18 UTC 
FEDORA-2021-32d0a39c1a has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 23 Fedora Update System 2021-10-29 23:10:03 UTC 
FEDORA-2021-a4a7e596f8 has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.