View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0011238Talermerchant backendpublic2026-03-11 21:562026-03-11 22:05
Reportersebasjm Assigned ToChristian Grothoff  
PriorityurgentSeveritycrashReproducibilityhave not tried
Status resolvedResolutionfixed 
Product Versiongit (master) 
Target Version1.5Fixed in Version1.5 
Summary0011238: crash trying to add a bank account after deleting some
Descriptioncurl 'https://merchant.taler/private/accounts' \
  -H 'Accept: application/json' \
  -H 'Accept-Language: en-US,en;q=0.9' \
  -H 'Authorization: Bearer secret-token:8MYR3242QJDHCZPYHSCECVJYNVCF8AVZTG3YN0MSH9NPVRGES3D0' \
  -H 'Cache-Control: no-cache' \
  -H 'Connection: keep-alive' \
  -H 'Content-Type: application/json' \
  -H 'Origin: https://dev.taler' \
  -H 'Pragma: no-cache' \
  -H 'Referer: https://dev.taler/' \
  -H 'Sec-Fetch-Dest: empty' \
  -H 'Sec-Fetch-Mode: cors' \
  -H 'Sec-Fetch-Site: cross-site' \
  -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36' \
  -H 'sec-ch-ua: "Chromium";v="139", "Not;A=Brand";v="99"' \
  -H 'sec-ch-ua-mobile: ?0' \
  -H 'sec-ch-ua-platform: "Linux"' \
  --data-raw '{"payto_uri":"payto://iban/DE38485296595257056838?receiver-name=pepe"}'



Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (Q80WNAX4BZJE9HJR6Q1TZTMK74) INFO Handling request (OPTIONS) for URL '/private/accounts'
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (Q80WNAX4BZJE9HJR6Q1TZTMK74) INFO Request for `/private/accounts' completed with HTTP status 204 (0)
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (Q80WNAX4BZJE9HJR6Q1TZTMK74) DEBUG Adding task 0x6353320060e0
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (Q80WNAX4BZJE9HJR6Q1TZTMK74) DEBUG Adding task 0x635331ffc800
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) INFO Handling request (POST) for URL '/private/accounts'
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) DEBUG Running prepared statement `select_login_token' on 0x635331f90e60
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) DEBUG Executing prepared SQL statement `select_login_token'
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) DEBUG Execution of prepared SQL statement `select_login_token' finished (PGRES_TUPLES_OK)
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) INFO Starting merchant DB transaction `post-account'
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) DEBUG Running statement `START TRANSACTION ISOLATION LEVEL SERIALIZABLE' on 0x635331f90e60
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) DEBUG Running statement `START TRANSACTION ISOLATION LEVEL SERIALIZABLE' on 0x635331f90e60 finished (PGRES>
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) DEBUG Running prepared statement `select_accounts' on 0x635331f90e60
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) DEBUG Executing prepared SQL statement `select_accounts'
Mar 11 17:47:25 marvin taler-merchant-httpd[3352191]: (196ANV3E6DBJA6SYGPPS6VV9HC) DEBUG Execution of prepared SQL statement `select_accounts' finished (PGRES_TUPLES_OK)
Mar 11 17:47:25 marvin systemd-coredump[3360170]: [�] Process 3352191 (taler-merchant-) of user 1000 dumped core.
                                                  
                                                  Module /install-prefix/bin/taler-merchant-httpd from deb glibc-2.42-0ubuntu3.1.amd64
                                                  Module linux-vdso.so.1 from deb linux-6.17.0-14.14.amd64
                                                  Module libpq.so.5 from deb postgresql-17-17.9-0ubuntu0.25.10.1.amd64
                                                  Module libresolv.so.2 from deb glibc-2.42-0ubuntu3.1.amd64
                                                  Module libkeyutils.so.1 from deb keyutils-1.6.3-6ubuntu2.amd64
                                                  Module libffi.so.8 from deb libffi-3.5.2-1build1.amd64


2026-03-11T17:48:56.362331-0300 taler-merchant-httpd-3360282 WARNING Terms of service not configured
2026-03-11T17:48:56.383419-0300 taler-merchant-httpd-3360282 WARNING Privacy policy not configured
==3360282== Invalid read of size 1
==3360282== at 0x4951D26: strlen (vg_replace_strmem.c:506)
==3360282== by 0x4B8D913: GNUNET_xstrdup_ (common_allocation.c:210)
==3360282== by 0x405A00A: TMH_private_post_account (taler-merchant-httpd_post-private-accounts.c:379)
==3360282== by 0x40104B9: process_upload_with_handler (taler-merchant-httpd.c:479)
==3360282== by 0x4010BD4: url_handler (taler-merchant-httpd.c:677)
==3360282== by 0x4B0D8A1: ??? (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B108E7: ??? (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B13947: ??? (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B14FB0: ??? (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B16367: MHD_run_wait (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B163EA: MHD_run (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4A3D69D: run_daemon (mhd_run.c:99)
==3360282== Address 0x0 is not stack'd, malloc'd or (recently) free'd
==3360282==
==3360282==
==3360282== Process terminating with default action of signal 11 (SIGSEGV): dumping core
==3360282== Access not within mapped region at address 0x0
==3360282== at 0x4951D26: strlen (vg_replace_strmem.c:506)
==3360282== by 0x4B8D913: GNUNET_xstrdup_ (common_allocation.c:210)
==3360282== by 0x405A00A: TMH_private_post_account (taler-merchant-httpd_post-private-accounts.c:379)
==3360282== by 0x40104B9: process_upload_with_handler (taler-merchant-httpd.c:479)
==3360282== by 0x4010BD4: url_handler (taler-merchant-httpd.c:677)
==3360282== by 0x4B0D8A1: ??? (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B108E7: ??? (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B13947: ??? (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B14FB0: ??? (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B16367: MHD_run_wait (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4B163EA: MHD_run (in /usr/lib/x86_64-linux-gnu/libmicrohttpd.so.12.62.1)
==3360282== by 0x4A3D69D: run_daemon (mhd_run.c:99)
==3360282== If you believe this happened as a result of a stack
==3360282== overflow in your program's main thread (unlikely but
==3360282== possible), you can try to increase the size of the
==3360282== main thread stack using the --main-stacksize= flag.
==3360282== The main thread stack size used in this run was 8388608.
==3360282==
==3360282== HEAP SUMMARY:
==3360282== in use at exit: 1,116,712 bytes in 1,684 blocks
==3360282== total heap usage: 4,656 allocs, 2,972 frees, 1,623,468 bytes allocated
==3360282==
==3360282== LEAK SUMMARY:
==3360282== definitely lost: 0 bytes in 0 blocks
==3360282== indirectly lost: 0 bytes in 0 blocks
==3360282== possibly lost: 2,808 bytes in 1 blocks
==3360282== still reachable: 1,113,904 bytes in 1,683 blocks
==3360282== suppressed: 0 bytes in 0 blocks
==3360282== Rerun with --leak-check=full to see details of leaked memory



#0 __strlen_avx2 () at ../sysdeps/x86_64/multiarch/strlen-avx2.S:76
No locals.
#1 0x00007c159146e914 in GNUNET_xstrdup_ (str=0x0, filename=0x6352f9b14318 "taler-merchant-httpd_post-private-accounts.c", linenumber=379) at ../src/lib/util/common_allocation.c:210
        slen = 0
        res = 0x635331fab940 ""
        __func__ = "GNUNET_xstrdup_"
#2 0x00006352f9abf00b in TMH_private_post_account (rh=0x6352f9b5bf00 <private_handlers+4576>, connection=0x635331ff1080, hc=0x635331fb06e0)
    at taler-merchant-httpd_post-private-accounts.c:379
        qs = 4
        wm = 0x635331fab940
        retries = 0
        mi = 0x635331fcba20
        pac = {uri = {full_payto = 0x635331fad2c0 "payto://iban/DE38485296595257056838?receiver-name=pepe"}, h_wire = {hash = {bits = {0 <repeats 16 times>}}}, salt = {salt = {0, 0, 0,
              0}}, credit_facade_url = 0x0, credit_facade_credentials = 0x0, extra_wire_subject_metadata = 0x0, have_any_account = false, have_same_account = false,
          have_conflicting_account = false}
        ispec = {{parser = 0x7c1591615a46 <parse_full_payto_uri>, cleaner = 0x0, cls = 0x0, field = 0x6352f9b142c0 "payto_uri", ptr = 0x7ffead1f60c0, missing = 0x0, size_ptr = 0x0,
            ptr_size = 0, is_optional = false}, {parser = 0x7c1591615820 <parse_web_url>, cleaner = 0x0, cls = 0x0, field = 0x6352f9b142ca "credit_facade_url", ptr = 0x7ffead1f6118,
            missing = 0x0, size_ptr = 0x0, ptr_size = 0, is_optional = true}, {parser = 0x7c159150681a <parse_string>, cleaner = 0x0, cls = 0x0,
            field = 0x6352f9b142dc "extra_wire_subject_metadata", ptr = 0x7ffead1f6128, missing = 0x0, size_ptr = 0x0, ptr_size = 0, is_optional = true}, {
            parser = 0x7c1591506d1b <parse_object_const>, cleaner = 0x0, cls = 0x0, field = 0x6352f9b142f8 "credit_facade_credentials", ptr = 0x7ffead1f6120, missing = 0x0, size_ptr = 0x0,
            ptr_size = 0, is_optional = true}, {parser = 0x0, cleaner = 0x0, cls = 0x0, field = 0x0, ptr = 0x0, missing = 0x0, size_ptr = 0x0, ptr_size = 0, is_optional = false}}
        __func__ = "TMH_private_post_account"
#3 0x00006352f9a754ba in process_upload_with_handler (hc=0x635331fb06e0, upload_data=0x0, upload_data_size=0x7ffead1f6410) at taler-merchant-httpd.c:479
        __func__ = "process_upload_with_handler"
#4 0x00006352f9a75bd5 in url_handler (cls=0x0, connection=0x635331ff1080, url=0x63533200c2d5 "/private/accounts", method=0x63533200c2d0 "POST", version=0x63533200c2e7 "HTTP/1.1",
    upload_data=0x0, upload_data_size=0x7ffead1f6410, con_cls=0x635331ff1138) at taler-merchant-httpd.c:677
        hc = 0x635331fb06e0
        use_admin = false
        is_public = false
        __func__ = "url_handler"



select * from merchant.merchant_accounts where merchant_serial = 1;

-[ RECORD 1 ]---------------+-----------------------------------------------------------------------------------------------------------------------------------
account_serial | 1
merchant_serial | 1
h_wire | \xece536e84eb06565d186a7e833d73aa923aa71e52b4257d04f7235ec70c84124e73555ad80bfb7ce8df286d03949b6959775d6822e47545898d33b40be57b16c
salt | \x7c272e95239763371d87ba9e81433c6a
credit_facade_url |
credit_facade_credentials |
last_bank_serial | 0
payto_uri | payto://iban/DE1231231231?receiver-name=qwe
active | f
extra_wire_subject_metadata |
-[ RECORD 2 ]---------------+-----------------------------------------------------------------------------------------------------------------------------------
account_serial | 3
merchant_serial | 1
h_wire | \x83be8b7f38ed51db79f6a04da0b008b21156f41c0b12446ae832375c668cb7863c355884f022dc5173a0afa55a27f70b9cc8e22d788e187ed6553a54cc0b9141
salt | \x115385af20733c9e8fa6c61a3823f012
credit_facade_url |
credit_facade_credentials |
last_bank_serial | 0
payto_uri | payto://iban/DE1327812254798?receiver-name=qwe
active | f
extra_wire_subject_metadata |
-[ RECORD 3 ]---------------+-----------------------------------------------------------------------------------------------------------------------------------
account_serial | 7
merchant_serial | 1
h_wire | \x3bb255240b12d0c0838d63d772d0b1de430931cb143c3815bcc008619247cdc380d67bd6c76639dbd99db96896d408aae6fad1dab3c0a45f4e0c2df10fd01835
salt | \xd17e93c771f066dbc3c477e35ed85e1d
credit_facade_url |
credit_facade_credentials |
last_bank_serial | 0
payto_uri | payto://iban/DE04220768875338616262?receiver-name=asd
active | f
extra_wire_subject_metadata |
-[ RECORD 4 ]---------------+-----------------------------------------------------------------------------------------------------------------------------------
account_serial | 10
merchant_serial | 1
h_wire | \xafcbe9f081a438b106a64b155afe7cd4cb122d182129c965f2cc4c717add6630d7683c13ea55d9d9bf0962ab72957cc195384373dd3f220209592cc5482c50cb
salt | \xeab0369ed4fc3e145b3808b19ff5f737
credit_facade_url |
credit_facade_credentials |
last_bank_serial | 0
payto_uri | payto://iban/DE15970186998345619168?receiver-name=alfred
active | f
extra_wire_subject_metadata | THEend123
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2026-03-11 21:56 sebasjm New Issue
2026-03-11 21:56 sebasjm Status new => assigned
2026-03-11 21:56 sebasjm Assigned To => Christian Grothoff
2026-03-11 21:57 sebasjm Description Updated
2026-03-11 22:05 Christian Grothoff Status assigned => resolved
2026-03-11 22:05 Christian Grothoff Resolution open => fixed
2026-03-11 22:05 Christian Grothoff Fixed in Version => 1.5
2026-03-11 22:05 Christian Grothoff Product Version => git (master)
2026-03-11 22:05 Christian Grothoff Target Version => 1.5