All version of Ruby core dump in ethon running wpstools (wpscan)

[davidfavor]

https://bugs.ruby-lang.org/issues/10301 - Ruby bug ticket, where they referred the bug to ethon.

wpscanteam/wpscan#699 - Original wpscan bug.

[hanshasselberg]

@davidfavor thanks for reporting. I haven't seen that before.

[whitmer]

Seeing the same error as wpscanteam/wpscan#725 using the Typhoeus gem on Mac OS:

/Users/whitmer/.rvm/gems/ruby-2.1.5/gems/ethon-0.7.1/lib/ethon/easy/operations.rb:23: [BUG] Segmentation fault
ruby 2.1.5p273 (2014-11-13 revision 48405) [x86_64-darwin14.0]

-- Control frame information -----------------------------------------------
c:0039 p:---- s:0165 e:000164 CFUNC :easy_perform
c:0038 p:0016 s:0161 e:000160 METHOD /Users/whitmer/.rvm/gems/ruby-2.1.5/gems/ethon-0.7.1/lib/ethon/easy/operations.rb:23
c:0037 p:0024 s:0158 e:000157 METHOD /Users/whitmer/.rvm/gems/ruby-2.1.5/gems/typhoeus-0.6.9/lib/typhoeus/request/operations.rb:16
c:0036 p:0052 s:0154 e:000153 METHOD /Users/whitmer/.rvm/gems/ruby-2.1.5/gems/typhoeus-0.6.9/lib/typhoeus/request/cacheable.rb:18
c:0035 p:0036 s:0150 e:000149 METHOD /Users/whitmer/.rvm/gems/ruby-2.1.5/gems/typhoeus-0.6.9/lib/typhoeus/request/block_connection.rb:31
c:0034 p:0034 s:0147 e:000146 METHOD /Users/whitmer/.rvm/gems/ruby-2.1.5/gems/typhoeus-0.6.9/lib/typhoeus/request/stubbable.rb:23
c:0033 p:0022 s:0143 e:000142 METHOD /Users/whitmer/.rvm/gems/ruby-2.1.5/gems/typhoeus-0.6.9/lib/typhoeus/request/before.rb:26
c:0032 p:0031 s:0140 e:000139 METHOD /Users/whitmer/.rvm/gems/ruby-2.1.5/gems/typhoeus-0.6.9/lib/typhoeus/request/actions.rb:22

[blysik]

Note this same exact segfault exists when I use the curb gem.

The interesting bit is that if I just execute commands in irb, it's fine.

If I run the same code in the rails console, I get the segfault.

[blysik]

So... this is odd. If I comment this line from my Gemfile, I don't get the segfault:
gem 'spring-commands-rspec'

[jemc]

So... this is odd. If I comment this line from my Gemfile, I don't get the segfault:
gem 'spring-commands-rspec'

That probably means this issue has something to do with forking.

[hanshasselberg]

libcurl is threadsafe, but one must be careful. A hydra for example cannot be used across threads. maybe the gem forks, but does that accidentially.

[niko-pax-uofa]

This appears to be the same issue as typhoeus/typhoeus#452

[Kjarrigan]

Closing this as there has been no update for some years now. If you still encounter this issue I'll reopen. Might have been fixed by #136 so if you have the issue please try the master-version.