Re: PR/60346 CVS commit: src/usr.bin/ftp

["Michael van Elst via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR bin/60346; it has been noted by GNATS.

From: Michael van Elst <mlelstv%serpens.de@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: gnats-admin%netbsd.org@localhost, netbsd-bugs%netbsd.org@localhost
Subject: Re: PR/60346 CVS commit: src/usr.bin/ftp
Date: Wed, 8 Jul 2026 15:38:39 +0200

 On Wed, Jul 08, 2026 at 12:20:01PM +0000, Patrick Welche via gnats wrote:
 
 >  gdb `which ftp`
 >  run https://github.com/openmm/openmm/archive/8.5.2.tar.gz
 
 
 >  #17 0x00000000000215d3 in fetch_start_ssl (sock=sock@entry=8, 
 >      servername=servername@entry=0x7f7ff71ca6e0 "codeload.github.com")
 >      at /usr/src/usr.bin/ftp/ssl.c:674
 
 
 On amd64-current:
 
 Program received signal SIGSEGV, Segmentation fault.
 0x000079ccc1a7cce6 in strcmp () from /usr/lib/libc.so.12
 (gdb) where
 #0  0x000079ccc1a7cce6 in strcmp () from /usr/lib/libc.so.12
 #1  0x000079ccc1fd9446 in query_cmp (a=0x79ccc17c4020, b=0x7f7fff846990)
     at /scratch/netbsd-current/src/crypto/external/apache2/openssl/dist/crypto/property/property.c:194
 
 
 The segfault is trying to deference a pointer with the value "gz/refs".
 
 
 So that's probably a buffer overflow somewhere. I have a look.