Re: PR/60346 CVS commit: src/usr.bin/ftp

[Michael van Elst <mlelstv%serpens.de@localhost>]

On Wed, Jul 08, 2026 at 12:20:01PM +0000, Patrick Welche via gnats wrote:

>  gdb `which ftp`
>  run https://github.com/openmm/openmm/archive/8.5.2.tar.gz


>  #17 0x00000000000215d3 in fetch_start_ssl (sock=sock@entry=8, 
>      servername=servername@entry=0x7f7ff71ca6e0 "codeload.github.com")
>      at /usr/src/usr.bin/ftp/ssl.c:674


On amd64-current:

Program received signal SIGSEGV, Segmentation fault.
0x000079ccc1a7cce6 in strcmp () from /usr/lib/libc.so.12
(gdb) where
#0  0x000079ccc1a7cce6 in strcmp () from /usr/lib/libc.so.12
#1  0x000079ccc1fd9446 in query_cmp (a=0x79ccc17c4020, b=0x7f7fff846990)
    at /scratch/netbsd-current/src/crypto/external/apache2/openssl/dist/crypto/property/property.c:194


The segfault is trying to deference a pointer with the value "gz/refs".


So that's probably a buffer overflow somewhere. I have a look.