Bug 682497

User-Agent:       Mozilla/5.0 (X11; Linux x86_64; rv:2.0.0) Gecko/20100101 Firefox/4.0

I was trying to add an OpenSUSE Build Service repo through YAST - I typed the URL by heart, and put "https" instead of "http".

The URL with "https" (https://download.opensuse.org/repositories/home:/klaussfreire/openSUSE_11.4/) does not work, so I didn't expect it to work when I realized about the mistake - I didn't expect YAST to crash the way it did either, though.

YAST became unresponsive, and after restarting it, a popup gave the following useful info:

YaST got signal 11 at YCP file packager/repositories_include.ycp:188
/sbin/yast2: line 423:  2780 Segmentation fault      $ybindir/y2base $module "$@" "$SELECTED_GUI" $Y2_GEOMETRY $Y2UI_ARGS

Restarting YAST and adding the repo with the proper URL worked just fine, but in my experience, segmentation faults are usually exploitable as security holes, so I guess it should be looked into, hence the "critical" severity.


Reproducible: Always

Steps to Reproduce:
1. Start YAST
2. Open the "Software Repositories" app
3. Click to add a repo by URL
4. Enter "klauss-repo" as name
5. Enter "https://download.opensuse.org/repositories/home:/klaussfreire/OpenSUSE_11.4/" as URL
6. Press OK
7. "Cannot open installation media" pops up
8. Press "Abort"

Actual Results:  
1. Will freeze - Kill with Ctrl+Alt+ESC + clicking on YAST window
2. Popup shows the error


Expected Results:  
Should abort and let me type the correct URL (without https)

The system is a clean install, I just installed it prior to the steps shown above from the x86_64 ISO DVD image.