wget2 | wget2 segmentation fault in wget_hpkp_db_check_pubkey (#617)

[Fazal Majid (@fazalmajid)]

Fazal Majid created an issue: https://gitlab.com/gnuwget/wget2/-/issues/617



I see this behavior on both Alpine Linux and macOS Monterey:

```
zulfiqar ~/build>wget2 -c 
http://ftp.gnome.org/pub/gnome/sources/glib/2.74/glib-2.74.2.tar.xz
[0] Downloading 
'http://ftp.gnome.org/pub/gnome/sources/glib/2.74/glib-2.74.2.tar.xz' ...
HTTP response 302 Found 
[http://ftp.gnome.org/pub/gnome/sources/glib/2.74/glib-2.74.2.tar.xz]
Adding URL: https://ftp.gnome.org/pub/gnome/sources/glib/2.74/glib-2.74.2.tar.xz
[0] Downloading 
'https://ftp.gnome.org/pub/gnome/sources/glib/2.74/glib-2.74.2.tar.xz' ...
HTTP response 301 Moved Permanently 
[https://ftp.gnome.org/pub/gnome/sources/glib/2.74/glib-2.74.2.tar.xz]
Adding URL: https://download.gnome.org/sources/glib/2.74/glib-2.74.2.tar.xz
[0] Downloading 
'https://download.gnome.org/sources/glib/2.74/glib-2.74.2.tar.xz' ...
HTTP response 302 Found 
[https://download.gnome.org/sources/glib/2.74/glib-2.74.2.tar.xz]
Adding URL: 
https://ftp2.nluug.nl/windowing/gnome/sources/glib/2.74/glib-2.74.2.tar.xz
Adding URL: 
https://fr.rpmfind.net/linux/gnome.org/sources/glib/2.74/glib-2.74.2.tar.xz
[1] Downloading 
'https://fr.rpmfind.net/linux/gnome.org/sources/glib/2.74/glib-2.74.2.tar.xz' 
...
Saving 'glib-2.74.2.tar.xz'
Segmentation fault (core dumped)
zulfiqar ~/build>gdb /usr/local/bin/wget2 core
GNU gdb (GDB) 12.1
Copyright (C) 2022 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-pc-linux-musl".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/local/bin/wget2...
(No debugging symbols found in /usr/local/bin/wget2)
[New LWP 27187]
[New LWP 27188]
[New LWP 27186]
Core was generated by `wget2 -c 
http://ftp.gnome.org/pub/gnome/sources/glib/2.74/glib-2.74.2.tar.xz'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f23e69421e3 in wget_hpkp_db_check_pubkey ()
   from /usr/local/lib/libwget.so.1
[Current thread is 1 (LWP 27187)]
(gdb) bt
#0  0x00007f23e69421e3 in wget_hpkp_db_check_pubkey ()
   from /usr/local/lib/libwget.so.1
#1  0x00007f23e6957267 in openssl_revocation_check_fn ()
   from /usr/local/lib/libwget.so.1
#2  0x00007f23e641faca in internal_verify ()
   from /usr/local/ssl/lib/libcrypto.so.3
#3  0x00007f23e64211c1 in verify_chain ()
   from /usr/local/ssl/lib/libcrypto.so.3
#4  0x00007f23e6421e3c in X509_verify_cert ()
   from /usr/local/ssl/lib/libcrypto.so.3
#5  0x00007f23e638d996 in ocsp_verify_signer ()
   from /usr/local/ssl/lib/libcrypto.so.3
#6  0x00007f23e638e09c in OCSP_basic_verify ()
   from /usr/local/ssl/lib/libcrypto.so.3
#7  0x00007f23e6956af9 in check_ocsp_response ()
   from /usr/local/lib/libwget.so.1
#8  0x00007f23e6957734 in openssl_revocation_check_fn ()
   from /usr/local/lib/libwget.so.1
#9  0x00007f23e641faca in internal_verify ()
   from /usr/local/ssl/lib/libcrypto.so.3
#10 0x00007f23e64211c1 in verify_chain ()
   from /usr/local/ssl/lib/libcrypto.so.3
#11 0x00007f23e6421e3c in X509_verify_cert ()
   from /usr/local/ssl/lib/libcrypto.so.3
#12 0x00007f23e65eb5f0 in ssl_verify_cert_chain ()
   from /usr/local/ssl/lib/libssl.so.3
#13 0x00007f23e662acee in tls_post_process_server_certificate ()
   from /usr/local/ssl/lib/libssl.so.3
#14 0x00007f23e6627185 in state_machine () from /usr/local/ssl/lib/libssl.so.3
#15 0x00007f23e6958601 in wget_ssl_open () from /usr/local/lib/libwget.so.1
#16 0x00007f23e694d6b2 in wget_tcp_connect () from /usr/local/lib/libwget.so.1
--Type <RET> for more, q to quit, c to continue without paging--
#17 0x00007f23e6946134 in wget_http_open () from /usr/local/lib/libwget.so.1
#18 0x0000559bf5b1577c in ?? ()
#19 0x0000559bf5b1da45 in ?? ()
#20 0x00007f23e6a0508b in ?? () from /lib/ld-musl-x86_64.so.1
#21 0x0000000000000000 in ?? ()
```

-- 
Reply to this email directly or view it on GitLab: 
https://gitlab.com/gnuwget/wget2/-/issues/617
You're receiving this email because of your account on gitlab.com.