[Bug 1375116] [NEW] git-remote-http crashed with SIGSEGV in gnutls_x509_crt_import()

[Spindizzy]

Public bug reported:

Okay, it crashed.  So, there's something wrong somewhere.  However, I'm
trying to set up an HTTPS Apache server to handle GIT, using a self-
signed certificate, so the problem could be entirely on my end.
(Digging through the web got me this far, but...)  The following is the
actual command I used that triggered this problem.

$ GIT_CURL_VERBOSE=1 GIT_SSL_NO_VERIFY=1 git clone https://GoldMine/git/ggc-main.git blank
Cloning into 'blank'...
* Couldn't find host GoldMine in the .netrc file; using defaults
* Hostname was NOT found in DNS cache
*   Trying 192.168.1.250...
* Connected to GoldMine (192.168.1.250) port 443 (#0)
* found 165 certificates in /etc/ssl/certs/ca-certificates.crt
* gnutls_handshake() warning: The server name sent was not recognized
* 	 common name: WARNING couldn't obtain
* 	 server certificate verification SKIPPED

I suggest that #1324564 may be related, and that the problem may be in
libcurl instead of directly in git.

ProblemType: Crash
DistroRelease: Ubuntu 14.04
Package: git 1:1.9.1-1
ProcVersionSignature: Ubuntu 3.13.0-36.63-generic 3.13.11.6
Uname: Linux 3.13.0-36-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.4
Architecture: amd64
CurrentDesktop: Unity
Date: Mon Sep 29 00:41:42 2014
ExecutablePath: /usr/lib/git-core/git-remote-http
InstallationDate: Installed on 2014-01-14 (257 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
ProcCmdline: git-remote-https origin https://GoldMine/git/ggc-main.git
SegvAnalysis:
 Segfault happened at: 0x7feaef3beb59 <gnutls_x509_crt_import+25>:	mov    (%rsi),%rsi
 PC (0x7feaef3beb59) ok
 source "(%rsi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%rsi" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: git
StacktraceTop:
 gnutls_x509_crt_import () from /usr/lib/x86_64-linux-gnu/libgnutls.so.26
 ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
 ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
 ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
 ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
Title: git-remote-http crashed with SIGSEGV in gnutls_x509_crt_import()
UpgradeStatus: Upgraded to trusty on 2014-05-23 (128 days ago)
UserGroups: adm cdrom dialout dip games kvm libvirtd lpadmin plugdev sambashare sudo

** Affects: git (Ubuntu)
     Importance: Medium
         Status: New


** Tags: amd64 apport-crash trusty

** Information type changed from Private to Public

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to git in Ubuntu.
https://bugs.launchpad.net/bugs/1375116

Title:
  git-remote-http crashed with SIGSEGV in gnutls_x509_crt_import()

Status in “git” package in Ubuntu:
  New

Bug description:
  Okay, it crashed.  So, there's something wrong somewhere.  However,
  I'm trying to set up an HTTPS Apache server to handle GIT, using a
  self-signed certificate, so the problem could be entirely on my end.
  (Digging through the web got me this far, but...)  The following is
  the actual command I used that triggered this problem.

  $ GIT_CURL_VERBOSE=1 GIT_SSL_NO_VERIFY=1 git clone https://GoldMine/git/ggc-main.git blank
  Cloning into 'blank'...
  * Couldn't find host GoldMine in the .netrc file; using defaults
  * Hostname was NOT found in DNS cache
  *   Trying 192.168.1.250...
  * Connected to GoldMine (192.168.1.250) port 443 (#0)
  * found 165 certificates in /etc/ssl/certs/ca-certificates.crt
  * gnutls_handshake() warning: The server name sent was not recognized
  * 	 common name: WARNING couldn't obtain
  * 	 server certificate verification SKIPPED

  I suggest that #1324564 may be related, and that the problem may be in
  libcurl instead of directly in git.

  ProblemType: Crash
  DistroRelease: Ubuntu 14.04
  Package: git 1:1.9.1-1
  ProcVersionSignature: Ubuntu 3.13.0-36.63-generic 3.13.11.6
  Uname: Linux 3.13.0-36-generic x86_64
  ApportVersion: 2.14.1-0ubuntu3.4
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Mon Sep 29 00:41:42 2014
  ExecutablePath: /usr/lib/git-core/git-remote-http
  InstallationDate: Installed on 2014-01-14 (257 days ago)
  InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
  ProcCmdline: git-remote-https origin https://GoldMine/git/ggc-main.git
  SegvAnalysis:
   Segfault happened at: 0x7feaef3beb59 <gnutls_x509_crt_import+25>:	mov    (%rsi),%rsi
   PC (0x7feaef3beb59) ok
   source "(%rsi)" (0x00000000) not located in a known VMA region (needed readable region)!
   destination "%rsi" ok
  SegvReason: reading NULL VMA
  Signal: 11
  SourcePackage: git
  StacktraceTop:
   gnutls_x509_crt_import () from /usr/lib/x86_64-linux-gnu/libgnutls.so.26
   ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
   ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
   ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
   ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
  Title: git-remote-http crashed with SIGSEGV in gnutls_x509_crt_import()
  UpgradeStatus: Upgraded to trusty on 2014-05-23 (128 days ago)
  UserGroups: adm cdrom dialout dip games kvm libvirtd lpadmin plugdev sambashare sudo

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/git/+bug/1375116/+subscriptions