segfault at utp.cpp:1567

[msoltyspl]

Version: transmission-daemon 2.42+ (13099).

When utp is enabled, I can reproduce segfaults related to third-party/libutp/utp.cpp - though it can take many (tens) of hours before that particular thing happens. The offending instruction is:

resends[nr++] = v;
#0 0x080b7a94 in UTPSocket::selective_ack at utp.cpp:1567

nr was 13560 when the segfault happened, but resends table has only 32 entires. So that's hell of an overflow ;)

See the attached backtrace for more information.

[jordan]

msoltyspl, this appears to be a bug in libutp rather than Transmission. Please report this upstream to the libutp maintainers at ​https://github.com/bittorrent/libutp -- thanks!