Comment 4 for bug 973741

Revision history for this message
Brett Anderson (bzdzb) wrote : Re: s3cmd: segmentation fault for all https operations in libcrypto.so.1.0.0

Both curl and wget segfault:
$ wget https://secure.authorize.net/gateway/transact.dll
$ curl https://secure.authorize.net/gateway/transact.dll

They both use libcrypto.so.1.0.0 (/lib/x86_64-linux-gnu/libcrypto.so.1.0.0) and have similar backtraces:
Program received signal SIGSEGV, Segmentation fault.
RC4 () at rc4-x86_64.s:343
343 rc4-x86_64.s: No such file or directory.
(gdb) backtra
#0 RC4 () at rc4-x86_64.s:343
#1 0x000000000000009c in ?? ()
#2 0x000000000000005f in ?? ()
#3 0x0000000000697bb0 in ?? ()
#4 0x00007ffff78a5629 in rc4_hmac_md5_cipher

This seems related to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666405
Also, it looks like there may be an upstream patch according to http://old.nabble.com/-openssl.org--2792--Crash-in-rc4-on-x86_64-td33702502.html