>From: owner-openssl-us...@openssl.org On Behalf Of Jeremy Mortis
>Sent: Friday, 30 November, 2012 14:24
>I'm having an issue where wget (and curl) segfaults in libcrypto
>when trying to access a particular https site.
>The site can be accessed via IE or Firefox without problems.
>I'm running 64-bit Ubuntu 12.04 LTS with OpenSSL version 1.0.1 14 Mar 2012.
>I can easily imagine that the site owners of canadahelps.org
>have done something strange but one would hope that nothing
>they do should be able to create a segfault on the client end.
Agree there.
>Any ideas?
When you say "particular" does that mean you can successfully
access other sites with same wget and curl?
What about openssl s_client -connect www.canadahelps.org:443 <getroot
where getroot contains GET / HTTP/1.0<crlf><crlf> ?
If that also faults, add -state -msg to see when.
One thing is suspicious: your stack trace shows as in RC4,
but when I connect to that host with 1.0.1c s_client (on x86)
it negotiates (akRSA)TDES-SHA, not any RC4 suite. However,
some faults may clobber PC and/or stack, and without symbols
gdb often guesses wrong about "where" an address is anyway.
If you can get commandline s_client to fault, get (or create)
a build with symbols and try debugging that. If it only occurs
in the real app(s), that is likely to be harder.
<snip>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
