transmission-gtk crashed with SIGSEGV in gnutls_x509_crt_import()

[wgroiss]

I just made a download of this torrent:
http://www.stresslinux.org/sl/downloads/52.torrent
Then double click on the download-file "stresslinux_32bit_11.4.i686-0.7.106.iso.bz2.torrent" => transmission started (shortly) and crashed.

ProblemType: Crash
DistroRelease: Ubuntu 14.04
Package: transmission-gtk 2.82-1.1ubuntu3
ProcVersionSignature: Ubuntu 3.13.0-27.50-generic 3.13.11
Uname: Linux 3.13.0-27-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: amd64
CrashCounter: 1
CurrentDesktop: Unity
Date: Thu May 29 16:22:51 2014
ExecutablePath: /usr/bin/transmission-gtk
InstallationDate: Installed on 2013-12-29 (150 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
ProcCmdline: transmission-gtk /home/username/Downloads/stresslinux/stresslinux_32bit_11.4.i686-0.7.106.iso.bz2.torrent
SegvAnalysis:
 Segfault happened at: 0x7fadad070b19 <gnutls_x509_crt_import+25>: mov (%rsi),%rsi
 PC (0x7fadad070b19) ok
 source "(%rsi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%rsi" ok
 Stack memory exhausted (SP below stack segment)
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: transmission
StacktraceTop:
 gnutls_x509_crt_import () from /usr/lib/x86_64-linux-gnu/libgnutls.so.26
 ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
 ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
 ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
 ?? () from /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
Title: transmission-gtk crashed with SIGSEGV in gnutls_x509_crt_import()
UpgradeStatus: Upgraded to trusty on 2014-03-30 (59 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

[Apport retracing service (apport)]

Thank you for taking the time to report this crash and helping to make this software better. This particular crash has already been reported and is a duplicate of bug #1304004, so is being marked as such. Please look at the other bug report to see if there is any missing information that you can provide, or to see if there is a workaround for the bug. Additionally, any further discussion regarding the bug should occur in the other report. Please continue to report any other bugs you may find.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Paul Gauret (pgauret)]

Also facing the same bug. Bug #1304004 does not exist or is maybe private.

Core was generated by `/usr/bin/transmission-daemon --log-debug -f --config-dir /var/lib/transmission-'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0xb6b577b6 in gnutls_x509_crt_import () from /usr/lib/arm-linux-gnueabihf/libgnutls.so.26
(gdb) bt
#0 0xb6b577b6 in gnutls_x509_crt_import () from /usr/lib/arm-linux-gnueabihf/libgnutls.so.26
#1 0xb6ea03a0 in ?? () from /usr/lib/arm-linux-gnueabihf/libcurl-gnutls.so.4
Backtrace stopped: previous frame identical to this frame (corrupt stack?)

[wgroiss (wolfgang-groiss-gmx)]

Hello Paul,
i can not find this (duplicate-)bug #1304004?

What is the problem?

Best regards
Wolfgang

Am 2014-06-01 22:11, schrieb Paul Gauret:
> *** This bug is a duplicate of bug 1304004 ***
> https://bugs.launchpad.net/bugs/1304004
>
> Also facing the same bug. Bug #1304004 does not exist or is maybe
> private.
>
> Core was generated by `/usr/bin/transmission-daemon --log-debug -f --config-dir /var/lib/transmission-'.
> Program terminated with signal SIGSEGV, Segmentation fault.
> #0 0xb6b577b6 in gnutls_x509_crt_import () from /usr/lib/arm-linux-gnueabihf/libgnutls.so.26
> (gdb) bt
> #0 0xb6b577b6 in gnutls_x509_crt_import () from /usr/lib/arm-linux-gnueabihf/libgnutls.so.26
> #1 0xb6ea03a0 in ?? () from /usr/lib/arm-linux-gnueabihf/libcurl-gnutls.so.4
> Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>

[Paul Gauret (pgauret)]

I guess #1304004 is marked private as it relates to a security package.

Good news is that I found a workaround by downgrading to libcurl3-gnutls_7.35.0-1ubuntu1. So far Transmission is stable with it even under high load.
Bad news is that this particular version has a couple of nasty security bugs and that you have to be extremely careful if downgrading, as this library is shared with many other applications and that you may be exposed.

I will mark this bug as affecting libcurl3-gnutls and see what its maintainer thinks. My guess is that the security fixes recently applied somehow break Transmission.

[Paul Gauret (pgauret)]

Unfortunately still coredumping in the same place even after having tried swapping a few libs. Will have to wait for a maintainer to answer and help us here.

[wgroiss (wolfgang-groiss-gmx)]

Thank You for this information!
My private workaround is, to take "Deluge" instead for torrent-files;
since transmission is working again.

Best regards
Wolfgang

Am 2014-06-01 23:52, schrieb Paul Gauret:
> *** This bug is a duplicate of bug 1304004 ***
> https://bugs.launchpad.net/bugs/1304004
>
> I guess #1304004 is marked private as it relates to a security package.
>
> Good news is that I found a workaround by downgrading to libcurl3-gnutls_7.35.0-1ubuntu1. So far Transmission is stable with it even under high load.
> Bad news is that this particular version has a couple of nasty security bugs and that you have to be extremely careful if downgrading, as this library is shared with many other applications and that you may be exposed.
>
> I will mark this bug as affecting libcurl3-gnutls and see what its
> maintainer thinks. My guess is that the security fixes recently applied
> somehow break Transmission.
>
>
> ** Also affects: curl (Ubuntu)
> Importance: Undecided
> Status: New
>

[Paul Gauret (pgauret)]

Unmarked bug as duplicate of #1304004 which does not seem to exist or is private.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.