Public bug reported:

Binary package hint: lftp

Judging from the stack trace, this bug is distinct from #75304 and
#82394.

Running Ubuntu 6.06 LTS, lftp 3.4.0-1, i386.

To reproduce:
$ lftp http://ftp.mozilla.org/pub/mozilla.org/seamonkey/releases/1.0.8
lftp releases.mozilla.org:/pub/mozilla.org/seamonkey/releases/1.0.8> ls ..

Program received signal SIGSEGV, Segmentation fault.
0x080a02ae in url::path_index ()
(gdb) bt
#0  0x080a02ae in url::path_index ()
#1  0x08092b5f in FileAccess::GetFileURL ()
#2  0x080cb256 in HttpDirList::Do ()
#3  0x0808dc5e in SMTask::Schedule ()
#4  0x0806c17b in WaitDone ()
#5  0x0806c7ac in main ()
(gdb) x/10i $pc-18
0x80a029c <_ZN3url10path_indexEPKc>:    push   %ebp
0x80a029d <_ZN3url10path_indexEPKc+1>:  mov    %esp,%ebp
0x80a029f <_ZN3url10path_indexEPKc+3>:  push   %edi
0x80a02a0 <_ZN3url10path_indexEPKc+4>:  push   %esi
0x80a02a1 <_ZN3url10path_indexEPKc+5>:  push   %ebx
0x80a02a2 <_ZN3url10path_indexEPKc+6>:  sub    $0xc,%esp
0x80a02a5 <_ZN3url10path_indexEPKc+9>:  mov    0x8(%ebp),%eax
0x80a02a8 <_ZN3url10path_indexEPKc+12>: mov    %eax,0xfffffff0(%ebp)
0x80a02ab <_ZN3url10path_indexEPKc+15>: mov    0xfffffff0(%ebp),%ecx
0x80a02ae <_ZN3url10path_indexEPKc+18>: movzbl (%ecx),%ebx
(gdb) p $ecx
$2 = 0

The same steps work correctly with lftp 3.1.3-1 on Debian sarge.

I have also run lftp under ltrace, with the following results:
malloc(52)                                       = 0x8130870
malloc(96)                                       = 0x81308a8
malloc(6)                                        = 0x8130910
memcpy(0x8130910, "ls ..", 6)                    = 0x8130910
malloc(3)                                        = 0x8130920
memcpy(0x8130920, "ls", 3)                       = 0x8130920
malloc(31)                                       = 0x8130930
strcpy(0x8130930, "ls ..")                       = 0x8130930
malloc(6)                                        = 0x8130958
memcpy(0x8130958, "ls ..", 6)                    = 0x8130958
malloc(6)                                        = 0x8130968
memcpy(0x8130968, "ls ..", 6)                    = 0x8130968
free(0x8130930)                                  = <void>
free(0x8130958)                                  = <void>
free(0x81464c8)                                  = <void>
malloc(16)                                       = 0x81464e8
malloc(21)                                       = 0x812e810
strcpy(0x812e810, "")                            = 0x812e810
malloc(1)                                        = 0x81464c8
memcpy(0x81464c8, "", 1)                         = 0x81464c8
strrchr("", '@')                                 = NULL
malloc(42)                                       = 0x8130978
memcpy(0x8130978, "/pub/mozilla.org/seamonkey/relea"..., 42) = 0x8130978
malloc(70)                                       = 0x81309a8
memcpy(0x81309a8, "http://releases.mozilla.org/pub/";..., 70) = 0x81309a8
strchr("releases.mozilla.org/pub/mozilla"..., '/') = 
"/pub/mozilla.org/seamonkey/relea"...
strcpy(0xbfb165b0, "/pub/mozilla.org/seamonkey/relea"...) = 0xbfb165b0
strcpy(0xbfb16590, "..")                         = 0xbfb16590
free(0x81309a8)                                  = <void>
sprintf("/pub/mozilla.org/seamonkey/relea"..., "%s/%s", 
"/pub/mozilla.org/seamonkey/relea"..., "..") = 44
free(0x8130978)                                  = <void>
malloc(45)                                       = 0x8130930
memcpy(0x8130930, "/pub/mozilla.org/seamonkey/relea"..., 45) = 0x8130930
--- SIGSEGV (Segmentation fault) ---

** Affects: lftp (Ubuntu)
     Importance: Undecided
         Status: Unconfirmed

-- 
lftp 3.4.0 segfaults on "ls .."
https://launchpad.net/bugs/92464

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to