segv in serf_linebuf_fetch

[GoogleCodeExporter]

Build svn with:  serf r1109,  subversion r25246

svn checkout http://serf.googlecode.com/svn/trunk/ serf

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 18379)]
0xb7cf267b in *__GI_memcpy (dstpp=0x810dea0, srcpp=0x80cee00,
len=4294967295) at ../sysdeps/generic/memcpy.c:55
55      ../sysdeps/generic/memcpy.c: No such file or directory.
        in ../sysdeps/generic/memcpy.c
(gdb) bt
#0  0xb7cf267b in *__GI_memcpy (dstpp=0x810dea0, srcpp=0x80cee00,
len=4294967295) at ../sysdeps/generic/memcpy.c:55
#1  0xb7eb62d7 in serf_linebuf_fetch (linebuf=0x810de98, bucket=0x8116328,
acceptable=7) at buckets/buckets.c:498
#2  0xb7eb6b1d in fetch_line (ctx=0x810dea0, acceptable=-1) at
buckets/response_buckets.c:101
#3  0xb7eb6d1f in run_machine (bkt=0x8116228, ctx=0x810de88) at
buckets/response_buckets.c:190
#4  0xb7eb6fad in wait_for_body (bkt=0x8116228, ctx=0x810de88) at
buckets/response_buckets.c:296
#5  0xb7eb6fdb in serf_bucket_response_wait_for_headers (bucket=0xffffffff)
at buckets/response_buckets.c:314
#6  0xb7ed6d73 in handle_response (request=0x80f1da8, response=0x8116228,
baton=0x80ee160, pool=0x81e9830)
    at subversion/libsvn_ra_serf/util.c:915
#7  0xb7eb5469 in read_from_connection (conn=0x80ab8d0) at context.c:742
#8  0xb7eb55d8 in process_connection (conn=0x80ab8d0, events=1) at
context.c:846
#9  0xb7eb5807 in serf_context_run (ctx=0x80afe40, duration=-1,
pool=0x80b0828) at context.c:968
#10 0xb7ed489d in finish_report (report_baton=0x80be6d0, pool=0x80b0828) at
subversion/libsvn_ra_serf/update.c:2138
#11 0xb7f8da21 in svn_wc_crawl_revisions3 (path=0x807a380 "serf",
adm_access=0x80afa78, reporter=0xb7edbcc0,
    report_baton=0x80be6d0, restore_files=1, depth=svn_depth_infinity,
use_commit_times=0, notify_func=0x8055598 <notify>,
    notify_baton=0x807a390, traversal_info=0x80af980, pool=0x80b0828) at
subversion/libsvn_wc/adm_crawler.c:631
#12 0xb7ff75c1 in svn_client__update_internal (result_rev=0x0,
path=0x807a380 "serf", revision=0xbffff310,
    depth=svn_depth_infinity, ignore_externals=0,
allow_unver_obstructions=0, timestamp_sleep=0xbffff238, ctx=0x80791e8,
    pool=0x80b0828) at subversion/libsvn_client/update.c:229
#13 0xb7fd1304 in svn_client__checkout_internal (result_rev=0x0,
url=0x80b08b0 "http://serf.googlecode.com/svn/trunk",
    path=0x807a380 "serf", peg_revision=0xbffff304, revision=0xbffff310,
depth=svn_depth_infinity, ignore_externals=0,
    allow_unver_obstructions=0, timestamp_sleep=0x0, ctx=0x80791e8,
pool=0x80b0828) at subversion/libsvn_client/checkout.c:138
#14 0xb7fd1608 in svn_client_checkout3 (result_rev=0x0, URL=0x80b0888
"http://serf.googlecode.com/svn/trunk",
    path=0x807a380 "serf", peg_revision=0xbffff304, revision=0xbffff310,
depth=svn_depth_unknown, ignore_externals=0,
    allow_unver_obstructions=0, ctx=0x80791e8, pool=0x80b0828) at
subversion/libsvn_client/checkout.c:215
#15 0x0804d101 in svn_cl__checkout (os=0x8078d98, baton=0xbffff4a0,
pool=0x8078c80) at subversion/svn/checkout-cmd.c:159
#16 0x0805467b in main (argc=4, argv=0xbffff634) at subversion/svn/main.c:1688

(gdb) up
#1  0xb7eb62d7 in serf_linebuf_fetch (linebuf=0x810de98, bucket=0x8116328,
acceptable=7) at buckets/buckets.c:498
498                 memcpy(&linebuf->line[linebuf->used], data, len);

Original issue reported on code.google.com by DanChris...@gmail.com on 1 Jun 2007 at 8:30

[GoogleCodeExporter]

tcpdump that leads to a segv.

Original comment by DanChris...@gmail.com on 1 Jun 2007 at 10:27

Attachments:

• serf-segv.tcpdump

[GoogleCodeExporter]

tcpdump of a load that terminates cleanly with:
subversion/libsvn_ra_serf/util.c:874: (apr_err=20014)
svn: Unspecified error message

Original comment by DanChris...@gmail.com on 1 Jun 2007 at 10:28

Attachments:

• serf-unspec-error.tcpdump

[GoogleCodeExporter]

The way this code gets executed is if an error is ignored - Issue 18 should 
have the
real fix for this.

Original comment by justin.e...@gmail.com on 9 Jun 2007 at 12:32

• Changed state: WontFix