SP 2.4.3 segmentation fault with very long URLs

[Scott Koranda]

Hi,

I am able to cause Apache httpd child processes to segfault by
accessing a particularly long URL (1154 characters). 

The processes segfault even if the URL is not protected with
Shibboleth. All that is necessary is for the module to be
loaded, that is if

LoadModule mod_shib /usr/lib/apache2/modules/mod_shib_22.so

appears in the configuration.

The behavior of the SP is as expected for all other (shorter)
URLs.

A similar issue was reported in July 2011. See

http://groups.google.com/group/shibboleth-users/browse_thread/thread/f35e9cb2230c8106/8e74702af16d2c5f?lnk=gst&q=long+urls#8e74702af16d2c5f

The application I am running (Grouper) is also a Tomcat
webapp.

I have a core file and from it have generated a backtrace
using gdb.

The SP is running code from the 2.4.3 release.

Since the SP is running on Debian Squeeze should I file a bug
report for the Debian Shib Team or with the Shib development
team?

Thanks,

Scott K