Basic Auth causes segfault in both 2.69 and 2.70

[Jesse]

When I run a siege with the login user:pass:realm it gets killed by
glibc.
I must stress that when hitting a URLs file without any basic auth it
works fine, in fact have been running for months on end.
I thought this used to work, so I'm wondering what has changed.
Basic auth in browsers to the URLS in the file works fine, it utilizes
an auth cookie after prompting once.

Running Gentoo.
Linux siege4 2.6.25-gentoo-r7 #1 SMP Sun Aug 10 21:11:18 MST 2008
x86_64 Intel(R) Xeon(R) CPU L5420 @ 2.50GHz GenuineIntel
GNU/Linux

--------------
siegerc contans:
logfile = /localdata/siege/siege.log
verbose = true
csv = true
fullurl = true
display-id = true
show-logfile = true
logging = true
protocol = HTTP/1.1
chunked = true
cache = false
connection = close
concurrent = 30
file = /localdata/siege/urls.txt
delay = 2
failures = 5000000
internet = true
benchmark = true
user-agent = siege4.pit
accept-encoding = gzip
spinner = true
login = user:pass:realm
follow-location = false

--------------------------------------
Log output:

** SIEGE 2.70
** Preparing 30 concurrent users for battle.
The server is now under siege...
*** glibc detected *** ./siege: double free or corruption (fasttop):
0x000000000051b0c0 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f5a860f2a7d]
/lib/libc.so.6(__libc_free+0x76)[0x7f5a860f40a6]
./siege[0x40467b]
./siege[0x405436]
./siege[0x4056e0]
./siege[0x406d14]
/lib/libpthread.so.0[0x7f5a86784135]
/lib/libc.so.6(__clone+0x6e)[0x7f5a861462ce]
======= Memory map: ========
00400000-00417000 r-xp 00000000 09:14
3751938 /localdata/siege/siege
00517000-00518000 rw-p 00017000 09:14
3751938 /localdata/siege/siege
00518000-0057f000 rw-p 00518000 00:00
0 [heap]
40572000-40573000 ---p 40572000 00:00 0
40573000-40d73000 rw-p 40573000 00:00 0
40d73000-40d74000 ---p 40d73000 00:00 0
40d74000-41574000 rw-p 40d74000 00:00 0
41574000-41575000 ---p 41574000 00:00 0
41575000-41d75000 rw-p 41575000 00:00 0
41d75000-41d76000 ---p 41d75000 00:00 0
41d76000-42576000 rw-p 41d76000 00:00 0
42576000-42577000 ---p 42576000 00:00 0
42577000-42d77000 rw-p 42577000 00:00 0
42d77000-42d78000 ---p 42d77000 00:00 0
42d78000-43578000 rw-p 42d78000 00:00 0
43578000-43579000 ---p 43578000 00:00 0
43579000-43d79000 rw-p 43579000 00:00 0
43d79000-43d7a000 ---p 43d79000 00:00 0
43d7a000-4457a000 rw-p 43d7a000 00:00 0
4457a000-4457b000 ---p 4457a000 00:00 0
4457b000-44d7b000 rw-p 4457b000 00:00 0
44d7b000-44d7c000 ---p 44d7b000 00:00 0
44d7c000-4557c000 rw-p 44d7c000 00:00 0
4557c000-4557d000 ---p 4557c000 00:00 0
4557d000-45d7d000 rw-p 4557d000 00:00 0
45d7d000-45d7e000 ---p 45d7d000 00:00 0
45d7e000-4657e000 rw-p 45d7e000 00:00 0
4657e000-4657f000 ---p 4657e000 00:00 0
4657f000-46d7f000 rw-p 4657f000 00:00 0
46d7f000-46d80000 ---p 46d7f000 00:00 0
46d80000-47580000 rw-p 46d80000 00:00 0
47580000-47581000 ---p 47580000 00:00 0
47581000-47d81000 rw-p 47581000 00:00 0
47d81000-47d82000 ---p 47d81000 00:00 0
47d82000-48582000 rw-p 47d82000 00:00 0
48582000-48583000 ---p 48582000 00:00 0
48583000-48d83000 rw-p 48583000 00:00 0
48d83000-48d84000 ---p 48d83000 00:00 0
48d84000-49584000 rw-p 48d84000 00:00 0
49584000-49585000 ---p 49584000 00:00 0
49585000-49d85000 rw-p 49585000 00:00 0
49d85000-49d86000 ---p 49d85000 00:00 0
49d86000-4a586000 rw-p 49d86000 00:00 0
4a586000-4a587000 ---p 4a586000 00:00 0
4a587000-4ad87000 rw-p 4a587000 00:00 0
4ad87000-4ad88000 ---p 4ad87000 00:00 0
4ad88000-4b588000 rw-p 4ad88000 00:00 0
4b588000-4b589000 ---p 4b588000 00:00 0
4b589000-4bd89000 rw-p 4b589000 00:00 0
4bd89000-4bd8a000 ---p 4bd89000 00:00 0
4bd8a000-4c58a000 rw-p 4bd8a000 00:00 0
4c58a000-4c58b000 ---p 4c58a000 00:00 0
4c58b000-4cd8b000 rw-p 4c58b000 00:00 0
4cd8b000-4cd8c000 ---p 4cd8b000 00:00 0
4cd8c000-4d58c000 rw-p 4cd8c000 00:00 0
4d58c000-4d58d000 ---p 4d58c000 00:00 0
4d58d000-4dd8d000 rw-p 4d58d000 00:00 0
4dd8d000-4dd8e000 ---p 4dd8d000 00:00 0
4dd8e000-4e58e000 rw-p 4dd8e000 00:00 0
4e58e000-4e58f000 ---p 4e58e000 00:00 0
4e58f000-4ed8f000 rw-p 4e58f000 00:00 0
4ed8f000-4ed90000 ---p 4ed8f000 00:00 0
4ed90000-4f590000 rw-p 4ed90000 00:00 0
4f590000-4f591000 ---p 4f590000 00:00 0
4f591000-4fd91000 rw-p 4f591000 00:00 0
7f5a70000000-7f5a70023000 rw-p 7f5a70000000 00:00 0
7f5a70023000-7f5a74000000 ---p 7f5a70023000 00:00 0
7f5a78000000-7f5a78024000 rw-p 7f5a78000000 00:00 0
7f5a78024000-7f5a7c000000 ---p 7f5a78024000 00:00 0
7f5a7c000000-7f5a7c021000 rw-p 7f5a7c000000 00:00 0
7f5a7c021000-7f5a80000000 ---p 7f5a7c021000 00:00 0
7f5a80000000-7f5a80022000 rw-p 7f5a80000000 00:00 0
7f5a80022000-7f5a84000000 ---p 7f5a80022000 00:00 0
7f5a85e67000-7f5a85e73000 r-xp 00000000 09:00
553816 /lib64/libgcc_s.so.1
7f5a85e73000-7f5a85f73000 ---p 0000c000 09:00
553816 /lib64/libgcc_s.so.1
7f5a85f73000-7f5a85f74000 rw-p 0000c000 09:00
553816 /lib64/libgcc_s.so.1
7f5a85f74000-7f5a85f88000 r-xp 00000000 09:00
553836 /lib64/libz.so.1.2.3
7f5a85f88000-7f5a86087000 ---p 00014000 09:00
553836 /lib64/libz.so.1.2.3
7f5a86087000-7f5a86088000 rw-p 00013000 09:00
553836 /lib64/libz.so.1.2.3
7f5a86088000-7f5a861b9000 r-xp 00000000 09:00
553930 /lib64/libc-2.5.so
7f5a861b9000-7f5a862b9000 ---p 00131000 09:00
553930 /lib64/libc-2.5.so
7f5a862b9000-7f5a862bc000 r--p 00131000 09:00
553930 /lib64/libc-2.5.so
7f5a862bc000-7f5a862be000 rw-p 00134000 09:00
553930 /lib64/libc-2.5.so
7f5a862be000-7f5a862c3000 rw-p 7f5a862be000 00:00 0
7f5a862c3000-7f5a8640e000 r-xp 00000000 09:00
1286846 /usr/lib64/libcrypto.so.0.9.8
7f5a8640e000-7f5a8650d000 ---p 0014b000 09:00
1286846 /usr/lib64/libcrypto.so.0.9.8
7f5a8650d000-7f5a86530000 rw-p 0014a000 09:00
1286846 /usr/lib64/libcrypto.so.0.9.8
7f5a86530000-7f5a86534000 rw-p 7f5a86530000 00:00 0
7f5a86534000-7f5a86574000 r-xp 00000000 09:00
1286834 /usr/lib64/libssl.so.0.9.8
7f5a86574000-7f5a86674000 ---p 00040000 09:00
1286834 /usr/lib64/libssl.so.0.9.8
7f5a86674000-7f5a8667a000 rw-p 00040000 09:00
1286834 /usr/lib64/libssl.so.0.9.8
7f5a8667a000-7f5a8667c000 r-xp 00000000 09:00
554022 /lib64/libdl-2.5.so
7f5a8667c000-7f5a8677c000 ---p 00002000 09:00
554022 /lib64/libdl-2.5.so
7f5a8677c000-7f5a8677e000 rw-p 00002000 09:00
554022 /lib64/libdl-2.5.so
7f5a8677e000-7f5a86793000 r-xp 00000000 09:00
554017 /lib64/libpthread-2.5.so
7f5a86793000-7f5a86892000 ---p 00015000 09:00
554017 /lib64/libpthread-2.5.so
7f5a86892000-7f5a86893000 r--p 00014000 09:00
554017 /lib64/libpthread-2.5.so
7f5a86893000-7f5a86894000 rw-p 00015000 09:00
554017 /lib64/libpthread-2.5.so
7f5a86894000-7f5a86898000 rw-p 7f5a86894000 00:00 0
7f5a86898000-7f5a868b3000 r-xp 00000000 09:00
553925 /lib64/ld-2.5.so
7f5a869a9000-7f5a869ac000 rw-p 7f5a869a9000 00:00 0
7f5a869b0000-7f5a869b3000 rw-p 7f5a869b0000 00:00 0
7f5a869b3000-7f5a869b4000 r--p 0001b000 09:00
553925 /lib64/ld-2.5.so
7f5a869b4000-7f5a869b5000 rw-p 0001c000 09:00
553925 /lib64/ld-2.5.so
7fff8e99f000-7fff8e9b4000 rw-p 7ffffffea000 00:00
0 [stack]
7fff8e9fe000-7fff8ea00000 r-xp 7fff8e9fe000 00:00
0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00
0 [vsyscall]
Aborted

You can find me on IRC as UForgotten on irc.freenode.net for live
troubleshooting if possible. Thanks!

[Jeff Fulmer]

On Tue, May 10, 2011 at 12:00 PM, Jesse <jesse...@gmail.com> wrote:
> When I run a siege with the login user:pass:realm it gets killed by
> glibc.
> I must stress that when hitting a URLs file without any basic auth it
> works fine, in fact have been running for months on end.
> I thought this used to work, so I'm wondering what has changed.
> Basic auth in browsers to the URLS in the file works fine, it utilizes
> an auth cookie after prompting once.
>

I can't seem to reproduce this. Do you compile this binary or did you
get it from a distribution? There's no symbols in the stack trace.
It's not clear where it thinks it's freeing memory twice.

[Jesse]

The second binary (for 2.70) was compiled on the same box (since its
Gentoo, there's no such thing as a binary distro :).
I didn't have my developers look at the code yet, but I have a
sneaking suspicion the problem lies in handling the 401 response or
processing our auth cookie since it blows up immediately only after
one hit from each thread.
Note: Curl/Firefox/Chrome/IE have no issues with it.

On May 11, 8:39 am, Jeff Fulmer <j...@joedog.org> wrote:

[Jeff Fulmer]

On Wed, May 11, 2011 at 11:14 AM, Jesse <jesse...@gmail.com> wrote:
> The second binary (for 2.70) was compiled on the same box (since its
> Gentoo, there's no such thing as a binary distro :).
> I didn't have my developers look at the code yet, but I have a
> sneaking suspicion the problem lies in handling the 401 response or
> processing our auth cookie since it blows up immediately only after
> one hit from each thread.
> Note: Curl/Firefox/Chrome/IE have no issues with it.
>

If you have a public facing URL that demonstrates the problem and
you'd like to give me some creds to access it, you can send it to me
via this form...

http://www.joedog.org/index/contact-form