segmentation violation using openssh-2.9.9p2 on linux 2.2.19

[Charlie Root]

I received a segmentation violation whilst using openssh-2.2.9p2 today:

	Kernel 2.2.19-6.2.7 (Redhat 6.2)
	Gcc version egcs-2.91.66
	glibc-2.1.3-22
	Hardware is 333MHz K6-3Dnow with 64MB RAM if that matters

Here is what happened along with a stack dump...


# ssh -L 80:someplace.net:80 -l charlie someplace.net
Password:
(works for a while, then seems to freeze)
^C
Segmentation violation (core dumped)
# cd /usr/local/src/openssh-2.9.9p2
# gdb /usr/local/bin/ssh ~root/core
GNU gdb 19991004
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...
(no debugging symbols found)...
Core was generated by `ssh -L 80:someplace.net:80 -l charlie someplace.net'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libz.so.1...(no debugging symbols found)...done.
Reading symbols from /lib/libnsl.so.1...done.
Reading symbols from /lib/libutil.so.1...done.
Reading symbols from /usr/lib/libcrypto.so.0...done.
Reading symbols from /lib/libcrypt.so.1...done.
Reading symbols from /lib/libc.so.6...done.
Reading symbols from /lib/ld-linux.so.2...done.
Reading symbols from /lib/libnss_files.so.2...done.
Reading symbols from /lib/libnss_nisplus.so.2...done.
Reading symbols from /lib/libnss_nis.so.2...done.
Reading symbols from /lib/libnss_dns.so.2...done.
Reading symbols from /lib/libresolv.so.2...done.
#0  0x4019d109 in chunk_free (ar_ptr=0x40231d40, p=0x808cf38) at malloc.c:3111
3111	malloc.c: No such file or directory.
(gdb) backtrace
#0  0x4019d109 in chunk_free (ar_ptr=0x40231d40, p=0x808cf38) at malloc.c:3111
#1  0x4019cf9a in __libc_free (mem=0x808cf40) at malloc.c:3023
#2  0x8067452 in error ()
#3  0x80534ab in EVP_get_digestbyname ()
#4  0x804d230 in EVP_get_digestbyname ()
#5  0x804c797 in EVP_get_digestbyname ()
#6  0x4015b9cb in __libc_start_main (
    main=0x804b9e4 <EVP_get_digestbyname+1116>, argc=6, argv=0xbffffb54, 
    init=0x804a898 <_init>, fini=0x80691dc <_fini>, 
    rtld_fini=0x4000aea0 <_dl_fini>, stack_end=0xbffffb4c)
    at ../sysdeps/generic/libc-start.c:92
(gdb) quit
#