X2Go Bug report logs - #1460
Windows client crashes if Jumphost runs NetBSD 6 (probably race)

Full log

Message #16 received at 1460@bugs.x2go.org (full text, mbox, reply):

Received: (at 1460) by bugs.x2go.org; 4 May 2020 15:48:26 +0000
From ef@math.uni-bonn.de  Mon May  4 17:48:23 2020
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=3.0 tests=BAYES_50,SPF_HELO_NONE
	autolearn=ham autolearn_force=no version=3.4.2
Received: from ems.math.uni-bonn.de (ems.math.uni-bonn.de [131.220.132.179])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 2C7D05DAC1
	for <1460@bugs.x2go.org>; Mon,  4 May 2020 17:48:22 +0200 (CEST)
Received: from trav.math.uni-bonn.de (p54932A39.dip0.t-ipconnect.de [84.147.42.57])
	by ems.math.uni-bonn.de (Postfix) with ESMTPSA id 53BB4BC9F1
	for <1460@bugs.x2go.org>; Mon,  4 May 2020 17:48:21 +0200 (CEST)
	(envelope-from ef@math.uni-bonn.de)
Date: Mon, 4 May 2020 17:48:19 +0200
From: Edgar Fuß <ef@math.uni-bonn.de>
To: 1460@bugs.x2go.org
Subject: possible backtrace
Message-ID: <20200504154819.GC12762@trav.math.uni-bonn.de>
References: <20200419182314.GT12762@trav.math.uni-bonn.de>
 <handler.1460.B.158732059822516.ack@bugs.x2go.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <handler.1460.B.158732059822516.ack@bugs.x2go.org>
User-Agent: Mutt/1.11.4 (2019-03-13)

I may have been able to obtain a backtrace (using windebug):

 # ChildEBP RetAddr  Args to Child              
00 0607e87c 771d98cb 77114c88 933a9ca3 01b70000 ntdll!RtlpValidateHeapEntry+0x63ad4
01 0607e8dc 7712dd3e 015bfd78 933a9dcf 015bfd70 ntdll!RtlDebugFreeHeap+0xc6 (FPO: [Non-Fpo])
02 0607e9b0 77176ceb 015bfd70 015bfd78 015bfd78 ntdll!RtlpFreeHeap+0xce (FPO: [Non-Fpo])
03 0607ea0c 7712dc16 00000000 00000000 00000000 ntdll!RtlpFreeHeapInternal+0x783 (FPO: [Non-Fpo])
04 0607ea2c 754d7409 01b70000 00000000 015bfd78 ntdll!RtlFreeHeap+0x46 (FPO: [Non-Fpo])
05 0607ea78 61af8e1a 015bfd78 0000008b 0000008b msvcrt!free+0x69 (FPO: [Non-Fpo])
06 0607eac8 61ae8470 03be64f0 03addae8 0000000a libssh!ssh_threads_get_pthread+0x291a
07 0607eb08 61ae3c8c 03befbe0 03be64f0 0607eb3c libssh!ssh_pki_copy_cert_to_privkey+0x250
08 0607eb48 61ae2d84 03b1a620 00000015 03be65b0 libssh!ssh_bind_options_parse_config+0x215c
09 0607eb88 61ae3407 03b1a620 00000015 61b1b180 libssh!ssh_bind_options_parse_config+0x1254
0a 0607ebf8 61ae394f 03bc5070 00000010 03b1a620 libssh!ssh_bind_options_parse_config+0x18d7
0b 0607ec38 61ac55b7 03bc4ec0 0607ecb0 000001c0 libssh!ssh_bind_options_parse_config+0x1e1f
0c 00000000 00000000 00000000 00000000 00000000 libssh!ssh_buffer_add_data+0xe7

Unfortunately, this looks like a double free in libssh to me.

Send a report that this bug log contains spam.