Bug#503999: memory corruption in libcurl
Gabor Gombas
gombasg at sztaki.hu
Fri Oct 31 13:00:33 UTC 2008
reassign 503999 libcurl3 7.18.2-5
severity 503999 important
retitle 503999 libcurl3: memory corruption due to use-after-free
thanks
Hi,
Running boinc-client under valgrind shows that the bug is likely to be
in libcurl:
==29933== Invalid write of size 8
==29933== at 0x56071A8: multi_runsingle (multi.c:907)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d642f0 is 0 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x560724D: multi_runsingle (multi.c:1334)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645b8 is 712 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F2CE7: Curl_removeHandleFromPipeline (url.c:2279)
==29933== by 0x5607258: multi_runsingle (multi.c:1334)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8ee1a08 is 0 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2EC1: conn_free (url.c:2125)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 1
==29933== at 0x5606FFB: checkPendPipeline (multi.c:1976)
==29933== by 0x5607261: multi_runsingle (multi.c:1337)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645aa is 698 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x5607002: checkPendPipeline (multi.c:1974)
==29933== by 0x5607261: multi_runsingle (multi.c:1337)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645b0 is 704 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x5607009: checkPendPipeline (multi.c:1974)
==29933== by 0x5607261: multi_runsingle (multi.c:1337)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8ec6b08 is 0 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2EB3: conn_free (url.c:2124)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x5607012: checkPendPipeline (multi.c:1977)
==29933== by 0x5607261: multi_runsingle (multi.c:1337)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645b8 is 712 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x5607019: checkPendPipeline (multi.c:1978)
==29933== by 0x5607261: multi_runsingle (multi.c:1337)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645c0 is 720 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x5607020: checkPendPipeline (multi.c:1977)
==29933== by 0x5607261: multi_runsingle (multi.c:1337)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8ee1a20 is 24 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2EC1: conn_free (url.c:2125)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x5607024: checkPendPipeline (multi.c:1977)
==29933== by 0x5607261: multi_runsingle (multi.c:1337)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8ec6b20 is 24 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2EB3: conn_free (url.c:2124)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x5607028: checkPendPipeline (multi.c:1978)
==29933== by 0x5607261: multi_runsingle (multi.c:1337)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8efc038 is 0 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2ECF: conn_free (url.c:2126)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 1
==29933== at 0x560726A: multi_runsingle (multi.c:1339)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d644dc is 492 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F3090: Curl_done (url.c:4417)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d642f0 is 0 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F309B: Curl_done (url.c:4421)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645b8 is 712 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F2CE7: Curl_removeHandleFromPipeline (url.c:2279)
==29933== by 0x55F30A9: Curl_done (url.c:4421)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8ee1a08 is 0 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2EC1: conn_free (url.c:2125)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F30BB: Curl_done (url.c:4424)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645b0 is 704 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F2CE7: Curl_removeHandleFromPipeline (url.c:2279)
==29933== by 0x55F30C9: Curl_done (url.c:4424)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8ec6b08 is 0 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2EB3: conn_free (url.c:2124)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F30DB: Curl_done (url.c:4427)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645c0 is 720 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F2CE7: Curl_removeHandleFromPipeline (url.c:2279)
==29933== by 0x55F30E9: Curl_done (url.c:4427)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8efc038 is 0 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2ECF: conn_free (url.c:2126)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 1
==29933== at 0x55F30EA: Curl_done (url.c:4429)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d644db is 491 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F30F7: Curl_done (url.c:4429)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645b8 is 712 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F30FE: Curl_done (url.c:4429)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645b0 is 704 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F3105: Curl_done (url.c:4429)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8ee1a20 is 24 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2EC1: conn_free (url.c:2125)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F3109: Curl_done (url.c:4429)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8ec6b20 is 24 bytes inside a block of size 32 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F2EB3: conn_free (url.c:2124)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid write of size 1
==29933== at 0x55F311D: Curl_done (url.c:4437)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d644db is 491 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F315D: Curl_done (url.c:4449)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d64340 is 80 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F3176: Curl_done (url.c:4455)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d644e0 is 496 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55E9758: Curl_http_done (http.c:1830)
==29933== by 0x55F3194: Curl_done (url.c:4456)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d642f0 is 0 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid write of size 8
==29933== at 0x55E976F: Curl_http_done (http.c:1835)
==29933== by 0x55F3194: Curl_done (url.c:4456)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645f0 is 768 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid write of size 8
==29933== at 0x55E9781: Curl_http_done (http.c:1836)
==29933== by 0x55F3194: Curl_done (url.c:4456)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645f8 is 776 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid write of size 8
==29933== at 0x55E9790: Curl_http_done (http.c:1837)
==29933== by 0x55F3194: Curl_done (url.c:4456)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645e0 is 752 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid write of size 8
==29933== at 0x55E979F: Curl_http_done (http.c:1838)
==29933== by 0x55F3194: Curl_done (url.c:4456)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d645e8 is 760 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 1
==29933== at 0x55E97FA: Curl_http_done (http.c:1867)
==29933== by 0x55F3194: Curl_done (url.c:4456)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d644d3 is 483 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55E55E1: Curl_pgrsDone (progress.c:139)
==29933== by 0x55F319F: Curl_done (url.c:4460)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d642f0 is 0 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55E4EF5: Curl_pgrsUpdate (progress.c:238)
==29933== by 0x55E55F3: Curl_pgrsDone (progress.c:141)
==29933== by 0x55F319F: Curl_done (url.c:4460)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d642f0 is 0 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 1
==29933== at 0x55F31CD: Curl_done (url.c:4486)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d644c8 is 472 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 1
==29933== at 0x55F31E3: Curl_done (url.c:4500)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d644cb is 475 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F31EA: Curl_done (url.c:4498)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d64330 is 64 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid write of size 1
==29933== at 0x55F31EE: Curl_done (url.c:2576)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d64328 is 56 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933==
==29933== Invalid read of size 8
==29933== at 0x55F31FF: Curl_done (url.c:4500)
==29933== by 0x560727B: multi_runsingle (multi.c:1347)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
==29933== Address 0x8d64388 is 152 bytes inside a block of size 1,384 free'd
==29933== at 0x4C20B6E: free (vg_replace_malloc.c:323)
==29933== by 0x55F3017: Curl_disconnect (url.c:2216)
==29933== by 0x55F5001: CreateConnection (url.c:2506)
==29933== by 0x55F513A: Curl_connect (url.c:4350)
==29933== by 0x56076A4: multi_runsingle (multi.c:926)
==29933== by 0x5607D4A: curl_multi_perform (multi.c:1460)
==29933== by 0x43A606: HTTP_OP_SET::got_select(FDSET_GROUP&, double) (http_curl.C:912)
==29933== by 0x4133FE: CLIENT_STATE::do_io_or_sleep(double) (client_state.C:417)
==29933== by 0x43D03C: boinc_main_loop() (main.C:473)
==29933== by 0x5FEA1A5: (below main) (in /lib/libc-2.7.so)
Gabor
--
---------------------------------------------------------
MTA SZTAKI Computer and Automation Research Institute
Hungarian Academy of Sciences
---------------------------------------------------------
More information about the pkg-boinc-devel
mailing list