Bug 22389 - xmlrpc from xmlrpc-c segfaults
Summary: xmlrpc from xmlrpc-c segfaults
Status: RESOLVED OLD
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: All Packagers
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-01-14 00:18 CET by Herbert Poetzl
Modified: 2020-08-14 16:21 CEST (History)
2 users (show)

See Also:
Source RPM: xmlrpc-c-1.29.0-7.mga6.src.rpm
CVE:
Status comment:


Attachments

Description Herbert Poetzl 2018-01-14 00:18:44 CET
Description of problem:
When using xmlrpc from xmlrpc-c the tool simply segfaults.

Version-Release number of selected component (if applicable):
xmlrpc-c-1.29.0-7.mga6

How reproducible:
Always

Steps to Reproduce:
1. xmlrpc localhost info

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff722e163 in vfprintf () from /lib64/libc.so.6
Missing separate debuginfos, use: debuginfo-install lib64curl4-7.54.1-2.4.mga6.x86_64 lib64openssl1.0.0-1.0.2n-1.mga6.x86_64 lib64xml2_2-2.9.7-1.mga6.x86_64
(gdb) where
#0  0x00007ffff722e163 in vfprintf () from /lib64/libc.so.6
#1  0x00007ffff72edcd5 in __vasprintf_chk () from /lib64/libc.so.6
#2  0x00007ffff77b88cd in vasprintf (__ap=<optimized out>, __fmt=<optimized out>, __ptr=0x7fffffffdbb8) at /usr/include/bits/stdio2.h:210
#3  xmlrpc_vasprintf (retvalP=0x7fffffffdcf8, fmt=<optimized out>, varargs=varargs@entry=0x7fffffffdbd8) at /usr/src/debug/xmlrpc-c-1.29.0/lib/libutil/asprintf.c:124
#4  0x00007ffff77b8987 in xmlrpc_asprintf (retvalP=retvalP@entry=0x7fffffffdcf8, fmt=fmt@entry=0x7ffff7bda4cb "Authorization: %s") at /usr/src/debug/xmlrpc-c-1.29.0/lib/libutil/asprintf.c:145
#5  0x00007ffff7bd8b28 in addAuthorizationHeader (hdrValue=0x3100000004 <error: Cannot access memory at address 0x3100000004>, headerListP=0x7fffffffdcf0, envP=0x7fffffffdfb0)
    at /usr/src/debug/xmlrpc-c-1.29.0/lib/curl_transport/curltransaction.c:180
#6  createCurlHeaderList (headerListP=<synthetic pointer>, userAgent=0x0, dontAdvertise=false, authHdrValue=0x3100000004 <error: Cannot access memory at address 0x3100000004>, envP=0x7fffffffdfb0)
    at /usr/src/debug/xmlrpc-c-1.29.0/lib/curl_transport/curltransaction.c:252
#7  setupCurlSession (curlSetupP=0x626e90, userAgent=0x0, dontAdvertise=false, serverInfoP=0x7fffffffdfb0, responseXmlP=0x652ef0, callXmlP=0x652ed0, curlTransactionP=0x653050, envP=0x7fffffffdfb0)
    at /usr/src/debug/xmlrpc-c-1.29.0/lib/curl_transport/curltransaction.c:715
#8  curlTransaction_create (envP=envP@entry=0x7fffffffdfb0, curlSessionP=curlSessionP@entry=0x638510, serverP=serverP@entry=0x608010, callXmlP=callXmlP@entry=0x652ed0, responseXmlP=responseXmlP@entry=0x652ef0, dontAdvertise=false, 
    userAgent=0x0, curlSetupStuffP=0x626e90, userContextP=0x653010, finish=0x0, progress=0x0, curlTransactionPP=0x653018) at /usr/src/debug/xmlrpc-c-1.29.0/lib/curl_transport/curltransaction.c:762
#9  0x00007ffff7bd757a in createRpc (envP=envP@entry=0x7fffffffdfb0, clientTransportP=clientTransportP@entry=0x626e60, curlSessionP=0x638510, serverP=serverP@entry=0x608010, callXmlP=callXmlP@entry=0x652ed0, 
    responseXmlP=responseXmlP@entry=0x652ef0, complete=0x0, progress=0x0, callInfoP=0x0, rpcPP=0x7fffffffde28) at /usr/src/debug/xmlrpc-c-1.29.0/lib/curl_transport/xmlrpc_curl_transport.c:1194
#10 0x00007ffff7bd76b1 in call (envP=0x7fffffffdfb0, clientTransportP=0x626e60, serverP=0x608010, callXmlP=0x652ed0, responseXmlPP=0x7fffffffde80) at /usr/src/debug/xmlrpc-c-1.29.0/lib/curl_transport/xmlrpc_curl_transport.c:1479
#11 0x00007ffff7bd55e0 in xmlrpc_client_call2 (envP=envP@entry=0x7fffffffdfb0, clientP=0x652e60, serverInfoP=serverInfoP@entry=0x608010, methodName=<optimized out>, paramArrayP=<optimized out>, resultPP=resultPP@entry=0x7fffffffdee8)
    at /usr/src/debug/xmlrpc-c-1.29.0/src/xmlrpc_client.c:607
#12 0x00007ffff7bd6419 in xmlrpc_client_call_server_params (envP=envP@entry=0x7fffffffdfb0, serverInfoP=serverInfoP@entry=0x608010, methodName=methodName@entry=0x608ab0 "info", paramArrayP=paramArrayP@entry=0x608040)
    at /usr/src/debug/xmlrpc-c-1.29.0/src/xmlrpc_client_global.c:188
#13 0x0000000000402b40 in callWithClient (resultPP=<synthetic pointer>, paramArrayP=0x608040, methodName=0x608ab0 "info", serverInfoP=0x608010, envP=0x7fffffffdfa0) at /usr/src/debug/xmlrpc-c-1.29.0/tools/xmlrpc/xmlrpc.c:503
#14 doCall (resultPP=<synthetic pointer>, paramArrayP=0x608040, methodName=0x608ab0 "info", serverInfoP=0x608010, curluseragent=0x0, curlnoverifyhost=0, curlnoverifypeer=0, curlinterface=0x0, transport=0x0, envP=0x7fffffffdfa0)
    at /usr/src/debug/xmlrpc-c-1.29.0/tools/xmlrpc/xmlrpc.c:550
#15 main (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/xmlrpc-c-1.29.0/tools/xmlrpc/xmlrpc.c:606
Comment 1 Marja Van Waes 2018-01-14 08:17:33 CET
Assigning to all packagers collectively, since there is no registered maintainer for this package.

CC: (none) => marja11
Assignee: bugsquad => pkg-bugs

David Walser 2018-01-14 18:03:31 CET

Summary: xmlrpc segfaults => xmlrpc from xmlrpc-c segfaults

Comment 2 Aurelien Oudelet 2020-08-14 16:21:49 CEST
This message is a reminder that Mageia 6 is end of life.

Mageia stopped maintaining and issuing updates for Mageia 6. At that time this bug will be closed as OLD (EOL).

Package Maintainer: If you wish for this bug to remain open because you plan to 
fix it in a currently maintained version, simply change the 'version' to a later 
Mageia version prior to Mageia 6's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that we cannot 
be able to fix it before Mageia 6 was end of life.
If you would still like to see this bug fixed and are able to reproduce it against a later version of Mageia, you are encouraged to click on "Version" and change it against that version of Mageia.

Although we aim to fix as many bugs as possible during every release's lifetime, 
sometimes those efforts are overtaken by events. Often a more recent Mageia 
release includes newer upstream software that fixes bugs or makes them obsolete.

--
Mageia Bugsquad

Resolution: (none) => OLD
Status: NEW => RESOLVED
CC: (none) => ouaurelien


Note You need to log in before you can comment on or make changes to this bug.