[pkg-lighttpd] Bug#492225: lighttpd: mod_cgi segfaults on amd64

[paul van den berg]

Package: lighttpd
Version: 1.4.19-4
Severity: important

dwww request from localhost:
"GET /cgi-bin/dwww/usr/share/doc/?type=dir HTTP/1.1"

gives (from /var/log/lighttd/error.log):
*** glibc detected *** /usr/bin/perl: malloc(): memory corruption: 
0x0000000001146ca8 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f77ad0f301d]
/lib/libc.so.6[0x7f77ad0f52a6]
/lib/libc.so.6(__libc_malloc+0x90)[0x7f77ad0f6920]
/usr/lib/libperl.so.5.10(Perl_safesysmalloc+0x36)[0x7f77adaf6516]
/usr/lib/libperl.so.5.10[0x7f77adba074a]
/usr/lib/libperl.so.5.10(Perl_pp_sort+0xc98)[0x7f77adba2658]
/usr/lib/libperl.so.5.10(Perl_runops_standard+0x12)[0x7f77adb15302]
/usr/lib/libperl.so.5.10(perl_run+0x30f)[0x7f77adb1052f]
/usr/bin/perl(main+0xdc)[0x400d0c]
/lib/libc.so.6(__libc_start_main+0xf4)[0x7f77ad0a21c4]
/usr/bin/perl[0x400b69]
======= Memory map: ========
00400000-00401000 r-xp 00000000 08:01 277704                             
/usr/bin/perl
00601000-00602000 rw-p 00001000 08:01 277704                             
/usr/bin/perl
00e4d000-01186000 rw-p 00e4d000 00:00 0                                  [heap]
7f77a8000000-7f77a8021000 rw-p 7f77a8000000 00:00 0 
7f77a8021000-7f77ac000000 ---p 7f77a8021000 00:00 0 
7f77ac20a000-7f77ac220000 r-xp 00000000 08:01 798127                     
/lib/libgcc_s.so.1
7f77ac220000-7f77ac420000 ---p 00016000 08:01 798127                     
/lib/libgcc_s.so.1
7f77ac420000-7f77ac421000 rw-p 00016000 08:01 798127                     
/lib/libgcc_s.so.1
7f77ac421000-7f77ac423000 r-xp 00000000 08:01 312234                     
/usr/lib/perl/5.10.0/auto/Sys/Hostname/Hostname.so
[rest excluded]
(mod_cgi.c.1235) cleaning up CGI: process died with signal 6 

This happens on a amd64 machine. On a i386 machine with the same configuration
it works fine.


-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages lighttpd depends on:
ii  libattr1               1:2.4.43-1        Extended attribute shared library
ii  libbz2-1.0             1.0.5-0.1         high-quality block-sorting file co
ii  libc6                  2.7-10            GNU C Library: Shared libraries
ii  libgamin0 [libfam0]    0.1.9-2           Client library for the gamin file 
ii  libldap-2.4-2          2.4.10-2+lenny1   OpenLDAP libraries
ii  libpcre3               7.4-1+lenny2      Perl 5 Compatible Regular Expressi
ii  libssl0.9.8            0.9.8g-10.1       SSL shared libraries
ii  libterm-readline-perl- 1.0302-1          Perl implementation of Readline li
ii  lsb-base               3.2-12            Linux Standard Base 3.2 init scrip
ii  mime-support           3.44-1            MIME files 'mime.types' & 'mailcap
ii  zlib1g                 1:1.2.3.3.dfsg-12 compression library - runtime

lighttpd recommends no packages.

Versions of packages lighttpd suggests:
pn  apache2-utils                <none>      (no description available)
ii  openssl                      0.9.8g-10.1 Secure Socket Layer (SSL) binary a
pn  rrdtool                      <none>      (no description available)

-- no debconf information