{"thread":{"id":"17443","subject":"segfault when cloning over https","startedAt":"2009-01-29T18:45:23Z","lastAt":"2009-01-30T10:43:22Z","messageCount":3,"participants":["Jan Kasprzak","Daniel Stenberg"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"102484","messageId":"20090129184523.GI23133@fi.muni.cz","threadId":"17443","inReplyTo":null,"subject":"segfault when cloning over https","fromName":"Jan Kasprzak","fromEmail":"kas@fi.muni.cz","sentAt":"2009-01-29T18:45:23Z","receivedAt":"2009-01-29T18:45:23Z","isPatch":false,"sender":{"key":"kas@fi.muni.cz","avatar":null},"body":"\tHello,\n\nI am trying to use git for accessing the repository over https.\nI can run\n\ngit clone --bare http://www.fi.muni.cz/~kas/tmp/git.git\n\nwithout problems, but when I change http to https, it either segfaults\nor fails with heap corruption detected:\n\n$ git clone --bare https://www.fi.muni.cz/~kas/tmp/git.git\n[...]\ngot f1a1aac6880f1c8f122c57c2380800ec54d10982\n*** glibc detected *** git: double free or corruption (!prev): 0x00007f8455a90fe0 ***\n======= Backtrace: =========\n/lib64/libc.so.6[0xf8bec8]\n/lib64/libc.so.6(cfree+0x76)[0xf8e486]\n/lib64/libnsspem.so[0x7f845f3f2a75]\n/lib64/libnsspem.so[0x7f845f3e1a56]\n/lib64/libnsspem.so[0x7f845f3e71a9]\n/lib64/libnsspem.so[0x7f845f3ee9c4]\n/lib64/libnss3.so[0x7f846210dc4d]\n/lib64/libnss3.so(PK11_CreateGenericObject+0x42)[0x7f846210ded2]\n/usr/lib64/libcurl.so.4[0x14b129]\n/usr/lib64/libcurl.so.4(Curl_nss_connect+0x622)[0x14b9f2]\n/usr/lib64/libcurl.so.4(Curl_protocol_connect+0xd2)[0x12bd72]\n/usr/lib64/libcurl.so.4[0x13efd3]\n/usr/lib64/libcurl.so.4(curl_multi_perform+0x8b)[0x13f2ab]\ngit[0x49de9f]\ngit[0x49df2f]\ngit[0x4a0499]\ngit[0x4a081e]\ngit[0x49aa36]\ngit[0x494b41]\ngit[0x4942f3]\ngit[0x415674]\ngit[0x4041a3]\ngit[0x4043bc]\n/lib64/libc.so.6(__libc_start_main+0xe6)[0xf32576]\ngit[0x403c69]\n======= Memory map: ========\n00110000-00157000 r-xp 00000000 08:01 113025474                          /usr/lib64/libcurl.so.4.1.0\n00157000-00357000 ---p 00047000 08:01 113025474                          /usr/lib64/libcurl.so.4.1.0\n[...]\n\n\tI have tried this against various https servers hosting different\nrepositories, and from various distributions (including Fedora 7, Fedora 8,\nand Fedora 10, all x86_64), and from various git builds (1.6.0.6 from Fedora 10,\n1.6.1.2 built from the source, etc.\n\n\tDoes anybody see the same problem? Do you use git over https at all?\n\nIt is possible to test against this repository:\n\nhttp://www.fi.muni.cz/~kas/tmp/git.git\nhttps://www.fi.muni.cz/~kas/tmp/git.git\n\nYou will have to add the following certificate to your ca-bundle.crt\nto access the repository:\n\n-----BEGIN CERTIFICATE-----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\nIFfjrlWlrKXmiH9hCSQ5R/lIlrnG\n-----END CERTIFICATE-----\n\n\tPlease Cc: me directly, I am not a member of this list.\n\n\tThanks,\n\n-Yenya\n\n-- \n| Jan \"Yenya\" Kasprzak  <kas at {fi.muni.cz - work | yenya.net - private}> |\n| GPG: ID 1024/D3498839      Fingerprint 0D99A7FB206605D7 8B35FCDE05B18A5E |\n| http://www.fi.muni.cz/~kas/    Journal: http://www.fi.muni.cz/~kas/blog/ |\n>>  If you find yourself arguing with Alan Cox, you’re _probably_ wrong.  <<\n>>     --James Morris in \"How and Why You Should Become a Kernel Hacker\"  <<\n"},{"id":"102487","messageId":"alpine.DEB.1.10.0901291944030.5789@yvahk2.pbagnpgbe.fr","threadId":"17443","inReplyTo":"20090129184523.GI23133@fi.muni.cz","subject":"Re: segfault when cloning over https","fromName":"Daniel Stenberg","fromEmail":"daniel@haxx.se","sentAt":"2009-01-29T18:46:07Z","receivedAt":"2009-01-29T18:46:07Z","isPatch":false,"sender":{"key":"daniel@haxx.se","avatar":"https://gravatar.com/avatar/69fdca87edd17cee21ca2e79fc2ff671d644603c3dc27167430f3cd3dbab7ba8?d=mp&s=160"},"body":"On Thu, 29 Jan 2009, Jan Kasprzak wrote:\n\n> without problems, but when I change http to https, it either segfaults or \n> fails with heap corruption detected:\n\n> /lib64/libnsspem.so[0x7f845f3ee9c4]\n> /lib64/libnss3.so[0x7f846210dc4d]\n> /lib64/libnss3.so(PK11_CreateGenericObject+0x42)[0x7f846210ded2]\n> /usr/lib64/libcurl.so.4[0x14b129]\n\nThis is a libcurl built to use a Fedora-patched NSS library for the SSL stuff. \nYou could try to build your own libcurl with a different SSL library to see if \nthat works fine, as then we could narrow this down a bit...\n\n-- \n\n  / daniel.haxx.se\n"},{"id":"102561","messageId":"20090130104322.GK23133@fi.muni.cz","threadId":"17443","inReplyTo":"alpine.DEB.1.10.0901291944030.5789@yvahk2.pbagnpgbe.fr","subject":"Re: segfault when cloning over https","fromName":"Jan Kasprzak","fromEmail":"kas@fi.muni.cz","sentAt":"2009-01-30T10:43:22Z","receivedAt":"2009-01-30T10:43:22Z","isPatch":false,"sender":{"key":"kas@fi.muni.cz","avatar":null},"body":"Daniel Stenberg wrote:\n: On Thu, 29 Jan 2009, Jan Kasprzak wrote:\n: \n: >without problems, but when I change http to https, it either segfaults or \n: >fails with heap corruption detected:\n: \n: >/lib64/libnsspem.so[0x7f845f3ee9c4]\n: >/lib64/libnss3.so[0x7f846210dc4d]\n: >/lib64/libnss3.so(PK11_CreateGenericObject+0x42)[0x7f846210ded2]\n: >/usr/lib64/libcurl.so.4[0x14b129]\n: \n: This is a libcurl built to use a Fedora-patched NSS library for the SSL \n: stuff. You could try to build your own libcurl with a different SSL library \n: to see if that works fine, as then we could narrow this down a bit...\n\n\tGood guess! When I manually rebuild libcurl without nss and\nwith SSL, it works. I have forwarded this to Fedora bugzilla as\n\nhttps://bugzilla.redhat.com/show_bug.cgi?id=483222\n\n\tThanks,\n\n-Yenya\n\n-- \n| Jan \"Yenya\" Kasprzak  <kas at {fi.muni.cz - work | yenya.net - private}> |\n| GPG: ID 1024/D3498839      Fingerprint 0D99A7FB206605D7 8B35FCDE05B18A5E |\n| http://www.fi.muni.cz/~kas/    Journal: http://www.fi.muni.cz/~kas/blog/ |\n>>  If you find yourself arguing with Alan Cox, you’re _probably_ wrong.  <<\n>>     --James Morris in \"How and Why You Should Become a Kernel Hacker\"  <<\n"}]}