wget crashing in libc if using screen output

[Antonio Gallo]

I got wget crashing repeatetly in libc if verbose or progress is enable.
If use "-nv" flag it does not crash.

This is dmesg:

[44755.426609] wget[14324]: segfault at 564d49cc7000 ip 00007f95b0686328 sp 00007ffd8d1066c8 error 6 in libc-2.23.so[7f95b0514000+1c0000]
[44760.175689] wget[14336]: segfault at 56409e4cd000 ip 00007f12bb66e328 sp 00007fff63a84d68 error 6 in libc-2.23.so[7f12bb4fc000+1c0000]
[44827.776604] wget[16986]: segfault at 55b4cd4e5000 ip 00007f7917462328 sp 00007fff996f6a48 error 6 in libc-2.23.so[7f79172f0000+1c0000]
[44831.555214] wget[17010]: segfault at 56549efa1000 ip 00007f62d4acb328 sp 00007ffc9f4039a8 error 6 in libc-2.23.so[7f62d4959000+1c0000]

This is a strace of the command:

write(2, "Berserk_.mp4 "..., 189Berserkmp4 2%[+> ] 9,72M 395KB/s ) = 189
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949998})
read(3, "\214\22\366SA\276\312\344L\"\274:oD[\210\246\222,N\362w\253\310\\2A\360|\306\333;"..., 8192) = 8192
write(4, "\214\22\366SA\276\312\344L\"\274:oD[\210\246\222,N\362w\253\310\\2A\360|\306\333;"..., 4096) = 4096
write(4, "j\312\177l\367o\264\2220C\330\364\326Fc\375\200\303\213wa\356\237y,\236\212\315CI?\352"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "\364\264\2640:6q\245v\265\367\230\204\30\302\236\265\335\267\242\322\\\240\364L\374\274\260\3307[\r"..., 8192) = 8192
write(4, "\364\264\2640:6q\245v\265\367\230\204\30\302\236\265\335\267\242\322\\\240\364L\374\274\260\3307[\r"..., 4096) = 4096
write(4, "Og\0233\354\324v\251\211\332\274\377\322\347\214HdD(\0028\227\337v\311\334\25s\206|\2143"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "\2454\237\236\372;\357\270\276\212Kkd\2\302\272\343x\344Y*\201q\35\"\255h\225\203\17]\240"..., 8192) = 8192
write(4, "\2454\237\236\372;\357\270\276\212Kkd\2\302\272\343x\344Y*\201q\35\"\255h\225\203\17]\240"..., 4096) = 4096
write(4, "\316\263\213y\342\306\253\251x&\355\377m\367}\215\217Y\363\356\330}!]\326\326R\334\25!\306\236"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "\302h\211\244\325\32\275\326'D6E\325Y/f\200w\n\25\277n]\26\362\16~b\265.\222\322"..., 8192) = 8192
write(4, "\302h\211\244\325\32\275\326'D6E\325Y/f\200w\n\25\277n]\26\362\16~b\265.\222\322"..., 4096) = 4096
write(4, "\327t\20\275}j\377(\201\336GF\372!i\31\3604o\377\\\273\361\347\277\326\376\3425~\313O"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "\371+*\22663e0ip\30\0017w;\376\372\243\312\235\222\212Oj\225\267\315\352t\27\372\266"..., 8192) = 8192
write(4, "\371+*\22663e0ip\30\0017w;\376\372\243\312\235\222\212Oj\225\267\315\352t\27\372\266"..., 4096) = 4096
write(4, "[3\276(\205\244\3144\236\216\\\220\215\267\"Q\22\262\261P\364\332\204\344n1\fP\320\235\16s"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "\377\371\257\274\257\244\266/C$\257\341EpU\352\3410\325F\265r\221\271\331\227w\344\v\376\34\5"..., 8192) = 8192
write(4, "\377\371\257\274\257\244\266/C$\257\341EpU\352\3410\325F\265r\221\271\331\227w\344\v\376\34\5"..., 4096) = 4096
write(4, "\23P\272\345\211E\324Jo\367T*\v\366D\362\211~\10u\34\253\10Gh\265&\206\20\321{\f"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "(\315\265\366\307\224\32\30\245v\376\256\204\210d\311\250\315,|8\227#o\317\234\5L\21Zr\224"..., 8192) = 8192
write(4, "(\315\265\366\307\224\32\30\245v\376\256\204\210d\311\250\315,|8\227#o\317\234\5L\21Zr\224"..., 4096) = 4096
write(4, "\373\206\30\205\3\177Z\270\f\3rI\236s\244\340\377\3259\204\300\274\220W\330\7E\231\nU\301\257"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "_\3117_?M\362ae\263\267\177HtS\206\24\260\364\341\374\217\213\351I\342\345q\372\r\36\350"..., 8192) = 8192
write(4, "_\3117_?M\362ae\263\267\177HtS\206\24\260\364\341\374\217\213\351I\342\345q\372\r\36\350"..., 4096) = 4096
write(4, "\27&\311\263\362\f\33AgYC\224R\224l\245!1\251\353\366'#jd\35tA\202T4\301"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "\262\351A\237\267f\377\365N\335\326rm\360\277\313D\364gC\2001\10\216\0\0\2c\1\237-D"..., 8192) = 8192
write(4, "\262\351A\237\267f\377\365N\335\326rm\360\277\313D\364gC\2001\10\216\0\0\2c\1\237-D"..., 4096) = 4096
write(4, "Q\364QA@\rO\373r\202j\362\f\300}\315\254\n\211^K\205\fxA\3\266\343<\237\241\373"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "\344\3532U\26\rmV\273\267t\324~9d\37\r\335\255\235*\222\244\343\tB\340\v\305k\3463"..., 8192) = 8192
write(4, "\344\3532U\26\rmV\273\267t\324~9d\37\r\335\255\235*\222\244\343\tB\340\v\305k\3463"..., 4096) = 4096
write(4, "\332\25\0100\232\6\304\211A\356('\251\266V\23\20Y\376[\255\345\217\316x \247oo\6<O"..., 4096) = 4096
select(4, [3], NULL, NULL, {0, 950000}) = 1 (in [3], left {0, 949999})
read(3, "\367\353@\365\355\317\177\36'\236\335z\352\371\313S\246\365\271`\220e\10\270\356u\7=\f\273\2619"..., 8192) = 8192
write(4, "\367\353@\365\355\317\177\36'\236\335z\352\371\313S\246\365\271`\220e\10\270\356u\7=\f\273\2619"..., 4096) = 4096
write(4, "\354\247\370 L\231\251\334\204\17\\`:\177\\E\362\204:\234\352\313\346\337\0062BD\321\202\350\27"..., 4096) = 4096
nanosleep({0, 218952646}, 0x7fffb1d65e60) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x55fb0ca8e000} ---
+++ killed by SIGSEGV (core dumped) +++
/home/agx/bin/wget-adfly: riga 5: 18075 Errore di segmentazione (core dump creato) strace wget -c --tries=0 --read-timeout=20 $OPT $*

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: wget 1.17.1-1ubuntu1
Uname: Linux 4.6.0-0.bpo.1-amd64 x86_64
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
CurrentDesktop: X-Cinnamon
Date: Sun Aug 28 00:57:42 2016
JournalErrors:
 Error: command ['journalctl', '-b', '--priority=warning', '--lines=1000'] failed with exit code 1: Hint: You are currently not seeing messages from other users and the system.
       Users in the 'systemd-journal' group can see all messages. Pass -q to
       turn off this notice.
 No journal files were opened due to insufficient permissions.
SourcePackage: wget
UpgradeStatus: No upgrade log present (probably fresh install)

[Alexey (alexey-zakharenko)]

I've got the same problem. -nv solved it, thanks

[Antonio Gallo (badpenguin)]

I found out that the problem is with the output to console.
If you turn off output with -quiet or -nv it does not crash.
Also exporting LC_ALL=C will solve the problem.

Anyway i was unable to track with libc crashes, also using strace.

I tried to reinstall locale or regenerate them, whatever i could do but nothing changed.

So the problem could me more about the terminal and the locale rather then wget.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.