Re: PR/60346 CVS commit: src/usr.bin/ftp

Michael van Elst <[email protected]>
Newsgroups gmane.os.netbsd.bugs
Message-ID <[email protected]>
On Wed, Jul 08, 2026 at 12:20:01PM +0000, Patrick Welche via gnats wrote:

>  gdb `which ftp`
>  run https://github.com/openmm/openmm/archive/8.5.2.tar.gz


>  #17 0x00000000000215d3 in fetch_start_ssl (sock=sock@entry=8, 
>      servername=servername@entry=0x7f7ff71ca6e0 "codeload.github.com")
>      at /usr/src/usr.bin/ftp/ssl.c:674


On amd64-current:

Program received signal SIGSEGV, Segmentation fault.
0x000079ccc1a7cce6 in strcmp () from /usr/lib/libc.so.12
(gdb) where
#0  0x000079ccc1a7cce6 in strcmp () from /usr/lib/libc.so.12
#1  0x000079ccc1fd9446 in query_cmp (a=0x79ccc17c4020, b=0x7f7fff846990)
    at /scratch/netbsd-current/src/crypto/external/apache2/openssl/dist/crypto/property/property.c:194


The segfault is trying to deference a pointer with the value "gz/refs".


So that's probably a buffer overflow somewhere. I have a look.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.