qemu-img info segfaults when checking remote images over HTTPS (Debian Trixie)

Host environment

  • Operating system: Debian 13 Trixie
  • OS/kernel version: 6.12.41+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.41-1 (2025-08-12) x86_64 GNU/Linux
  • Architecture: x86
  • QEMU flavor: qemu-img
  • QEMU version: qemu-img version 10.0.2 (Debian 1:10.0.2+ds-2+b1)
  • QEMU command line: 
    qemu-img info https://cloud.debian.org/images/cloud/trixie/latest/debian-13-generic-arm64.qcow2

Description of problem

qemu-img info segfaults on checking a remote URL over HTTP.

Image has been downloaded and checked locally without any problems, however accessing the image over http (or https) raises segfault without any additional information. It does not seem to be dependent on image type (checked both .iso and .qcow images). Tested on both proprietary images and offical Debian cloud release, as seen in bug report cmd.

Steps to reproduce

  1. qemu-img info https://cloud.debian.org/images/cloud/trixie/latest/debian-13-generic-arm64.qcow2

Additional information

A self-signed certificate is installed on the host machine to access proprietary infra over HTTPS, but both http and https schemes produce the same result.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information