Package: lighttpd-mod-webdav Version: 1.4.44-1 Severity: important I'm trying to setup a webdav share for windows (10) clients to access.
One of the basic commands they send causes lighttpd to segfault with a "double free or corruption" error in syslog. Constantly. It's barely possible to get Windows to "mount" the webdav location, and totally impossible to copy a file into it. The only commands the Windows client gets to issue before it crashes are PROPFIND and LOCK, so it's one of those two triggering the error. Given the propensity of the file copy to trigger the crash, I suspect it is the LOCK call. The stack trace logged along with the segfault is: ======= Backtrace: ========= /lib/x86_64-linux-gnu/libc.so.6(+0x70bcb)[0x7fb1d6d57bcb] /lib/x86_64-linux-gnu/libc.so.6(+0x76fa6)[0x7fb1d6d5dfa6] /lib/x86_64-linux-gnu/libc.so.6(+0x7779e)[0x7fb1d6d5e79e] /usr/lib/lighttpd/mod_webdav.so(+0x257c)[0x7fb1d4bd957c] /usr/sbin/lighttpd(plugins_call_connection_reset+0x56)[0x560858e464f6] /usr/sbin/lighttpd(connection_reset+0x11)[0x560858e31e71] /usr/sbin/lighttpd(connection_state_machine+0x6e6)[0x560858e32d46] /usr/sbin/lighttpd(main+0x172d)[0x560858e2e1ed] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1)[0x7fb1d6d072b1] /usr/sbin/lighttpd(_start+0x2a)[0x560858e2f13a] This is 100% reproducible across multiple systems for me :( Note: I had the testing release installed when reporting this bug, but I did test it with the sid release and it fails in the same way. Note 2: I also tried the same basic configuration using the stable (jessie) version of lighttpd, and it does not crash, but it also doesn't work with the Windows clients due to missing support for some arguments Windows sends in the LOCK command. -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.8.0-2-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages lighttpd-mod-webdav depends on: ii libc6 2.24-8 ii libsqlite3-0 3.15.2-2 ii libuuid1 2.29-1 ii libxml2 2.9.4+dfsg1-2.1 ii lighttpd 1.4.43+git20161216-1 lighttpd-mod-webdav recommends no packages. lighttpd-mod-webdav suggests no packages. -- no debconf information
