error when downloading files >2GB

[Graham Inggs]

[SRU] The debdiff attached to LP: #1009436 backports cntlm-0.92.3-1ubuntu1 from Quantal to Precise.

[IMPACT]
When behind a corporate proxy requiring NTLM authentication, users are unable to download files larger than 2GB in size.

[Test Case]
Cntlm should be correctly configured and network proxy applied system wide as 127.0.0.1 port 3128 for HTTP, HTTPS and FTP, but not Socks.

Run 'wget http://cdimage.ubuntu.com/edubuntu/dvd/current/quantal-dvd-amd64.iso'
0.91 behaviour: the message 'Connection closed at byte 0. Retrying' appears repeatedly.
0.92 behaviour: the download proceeds normally.

[Regression Potential]
Minimal: cntlm has no dependants and no dependencies besides libc6.
Please see LP: #1009436 for additional information.

---------------------------------------------------------------------------------------

Attempting to download a file larger than 2GB using cntlm on Precise fails.

Example:
$ wget http://cdimage.ubuntu.com/edubuntu/dvd/current/quantal-dvd-amd64.iso
--2012-07-31 16:28:13-- http://cdimage.ubuntu.com/edubuntu/dvd/current/quantal-dvd-amd64.iso
Connecting to 127.0.0.1:3128... connected.
Proxy request sent, awaiting response... 200 OK
Length: 3028086784 (2,8G) [application/x-iso9660-image]
Saving to: `quantal-dvd-amd64.iso'

 0% [ ] 0 --.-K/s in 0s

2012-07-31 16:28:16 (0,00 B/s) - Connection closed at byte 0. Retrying.

--2012-07-31 16:28:17-- (try: 2) http://cdimage.ubuntu.com/edubuntu/dvd/current/quantal-dvd-amd64.iso
Connecting to 127.0.0.1:3128... connected.
Proxy request sent, awaiting response... 200 OK
Length: 3028086784 (2,8G) [application/x-iso9660-image]
Saving to: `quantal-dvd-amd64.iso'

 0% [ ] 0 --.-K/s in 0s

2012-07-31 16:28:18 (0,00 B/s) - Connection closed at byte 0. Retrying.

Running cntlm with debugging information (cntlm -v), shows that the data length is interpreted as a negative number:

Content-Length => 3028086784
Date => Tue, 31 Jul 2012 15:27:41 GMT
Content-Type => application/x-iso9660-image
ETag => "2760bfb-b47cf000-4c616386b9f40"
Server => Apache/2.2.14 (Ubuntu)
Accept-Ranges => bytes
Last-Modified => Tue, 31 Jul 2012 01:37:25 GMT
Sending headers (5)...
Body included. Lenght: -1266880512
data_send: read -1 of -1266880512 / 0 of -1266880512 (errno = Bad address)
data_send: fds 5:6 warning -1 (connection closed)
Could not send whole body

[Graham Inggs (ginggs)]

debdiff for Precise attached to LP: #1009436

[Clint Byrum (clint-fewbar)]

Hi Graham, thanks for uploading these fixes to precise-proposed. This particular bug is missing an easy to find, explicit test case and statement of Regression Potential, as per https://wiki.ubuntu.com/StableReleaseUpdates.

Please add those to the bug description and your upload will be considered for acceptance.

[Chris Halse Rogers (raof)]

Hello Graham, or anyone else affected,

Accepted cntlm into precise-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/cntlm/0.92.3-0ubuntu0.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please change the bug tag from verification-needed to verification-done. If it does not, change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[Graham Inggs (ginggs)]

Successfully tested on both the i386 and amd64 versions of cntlm from precise-proposed:

$ wget http://cdimage.ubuntu.com/edubuntu/dvd/current/quantal-dvd-amd64.iso
--2012-10-01 12:35:38-- http://cdimage.ubuntu.com/edubuntu/dvd/current/quantal-dvd-amd64.iso
Connecting to 127.0.0.1:3128... connected.
Proxy request sent, awaiting response... 200 OK
Length: 2715254784 (2,5G) [application/x-iso9660-image]
Saving to: `quantal-dvd-amd64.iso'

100%[====================================>] 2 715 254 784 1,10M/s in 44m 18s

2012-10-01 13:19:57 (998 KB/s) - `quantal-dvd-amd64.iso' saved [2715254784/2715254784]

[Colin Watson (cjwatson)]

The verification of this Stable Release Update has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regresssions.

[Launchpad Janitor (janitor)]

This bug was fixed in the package cntlm - 0.92.3-0ubuntu0.1

---------------
cntlm (0.92.3-0ubuntu0.1) precise-proposed; urgency=low

  * Backport 0.92.3-1ubuntu1 to Precise as an SRU (LP: #1009436):
    - Properly handle non-HTTP/1.1 keep-alive (LP: #1009436, #257210)
    - Support SHOUTcast (ICY) internet radio protocol (LP: #659809)
    - Fix error when downloading files >2GB (LP: #1031670)
    - Resolve proxy hostname on demand, not at startup (LP: #825593)

cntlm (0.92.3-1ubuntu1) quantal; urgency=low

  * Cherry-pick r306 from 0.93 to properly handle non-HTTP/1.1 keep-alive
    (LP: #1009436)

cntlm (0.92.3-1) unstable; urgency=low

  * New upstream release. Closes: #652725, #588920.
  * Fix Init script error, thanks Martijn. Closes: #588683.
  * Correct spellings in man page.
  * Update Standards Version, no changes needed.
 -- Graham Inggs <email address hidden> Wed, 29 Aug 2012 16:26:00 +0200