MantisBT - NetSurf
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0002634NetSurfCore-specificpublic2019-02-10 13:582019-09-08 07:43
ReporterAnthony J. Bentley 
Assigned ToVincent Sanders 
PrioritynormalSeveritycrashReproducibilityalways
StatusacknowledgedResolutionopen 
Platformamd64OSOpenBSDOS Version6.4 -current
Product Version3.8 
Target VersionFixed in Version 
Fixed in CI build #
Reported in CI build #
URL of problem pagehttps://www.reddit.com/r/openbsd/comments/aamri4/eurobsdcon2018_todd_m ortimer_removing_rop_gadgets/
Summary0002634: crash in fetch_curl_poll
DescriptionVisiting certain pages (seem to be Reddit pages with embedded YouTube videos) crashes NetSurf 3.8 on OpenBSD, both framebuffer and gtk.
Additional Information(gdb) run https://www.reddit.com/r/openbsd/comments/aamri4/eurobsdcon2018_todd_mortimer_removing_rop_gadgets/
The program being debugged has been started already.
Start it from the beginning? (y or n) y
Starting program: /usr/local/bin/netsurf-fb https://www.reddit.com/r/openbsd/comments/aamri4/eurobsdcon2018_todd_mortimer_removing_rop_gadgets/
Message translations failed to load
[New thread 559384]

Thread 1 received signal SIGBUS, Bus error.
_libc_fwrite (buf=<optimized out>, size=2, count=1, fp=0x72656d6d6f632066)
    at /usr/src/lib/libc/stdio/fwrite.c:82
82 _SET_ORIENTATION(fp, -1);
(gdb) bt
#0 _libc_fwrite (buf=<optimized out>, size=2, count=1, fp=0x72656d6d6f632066)
    at /usr/src/lib/libc/stdio/fwrite.c:82
#1 0x00000a18c0bc9a06 in Curl_debug (data=<optimized out>,
    type=CURLINFO_TEXT,
    ptr=0x7365747962203731 <error: Cannot access memory at address 0x7365747962203731>, size=53) at sendf.c:830
0000002 Curl_infof (data=0xa18db941008, fmt=<optimized out>) at sendf.c:254
#3 0x00000a18c0c09fe2 in http2_connisdead (conn=0xa18ea501008) at http2.c:214
#4 http2_conncheck (check=0xa18ea501008, checks_to_perform=1) at http2.c:239
#5 0x00000a18c0bd6560 in extract_if_dead (conn=0xa18ea501008,
    data=<optimized out>) at url.c:968
#6 ConnectionExists (data=<optimized out>, needle=<optimized out>,
    usethis=<optimized out>, force_reuse=<optimized out>,
    waitpipe=<optimized out>) at url.c:1135
#7 create_conn (data=0xa18fdf9a008, in_connect=0x7f7ffffc6720,
    async=0x7f7ffffc67de) at url.c:3884
#8 0x00000a18c0bd3b7f in Curl_connect (data=0xa18fdf9a008,
    asyncp=0x7f7ffffc67de, protocol_done=0x7f7ffffc67dd) at url.c:4151
#9 0x00000a18c0beb95b in multi_runsingle (multi=0xa19270f1608, now=...,
    data=<optimized out>) at multi.c:1463
#10 0x00000a18c0beb266 in curl_multi_perform (multi=0xa19270f1608,
    running_handles=0x7f7ffffc690c) at multi.c:2217
#11 0x00000a16830cc15f in fetch_curl_poll (scheme_ignored=<optimized out>)
    at content/fetchers/curl.c:1209
#12 0x00000a16830c88f7 in fetcher_poll (unused=<optimized out>)
    at content/fetch.c:271
#13 0x00000a16831d7fb4 in schedule_run ()
    at frontends/framebuffer/schedule.c:160
#14 0x00000a16831d4735 in framebuffer_run () at frontends/framebuffer/gui.c:596
#15 main (argc=2, argv=0x7f7ffffc83f8) at frontends/framebuffer/gui.c:2205
TagsNo tags attached.
Relationships
related to 0002640closed kinnison Cannot browse Twitter 
Attached Files

Notes
(0001872)
Anthony J. Bentley   
2019-02-10 13:59   
This is with curl-7.64.0.
(0001908)
Vincent Sanders   
2019-05-06 14:56   
appears to be http2 related. we have several reports of bad behaviour with http2
(0002091)
kinnison   
2019-09-08 07:43   
It's unclear if this is related to the issue in https://github.com/curl/curl/issues/4303 but it may be. Research suggests that reddit and twitter shared some interesting 'misbehaviours' with HTTP2 in the past.

Issue History
Date ModifiedUsernameFieldChange
2019-02-10 13:58Anthony J. BentleyNew Issue
2019-02-10 13:59Anthony J. BentleyNote Added: 0001872
2019-05-06 14:56Vincent SandersAssigned To => Vincent Sanders
2019-05-06 14:56Vincent SandersStatusnew => acknowledged
2019-05-06 14:56Vincent SandersNote Added: 0001908
2019-05-06 14:57Vincent SandersRelationship addedrelated to 0002640
2019-09-08 07:43kinnisonNote Added: 0002091