Debian Bug report logs - #240072
openssl: "engine dynamic -pre" segfaults

version graph

Package: openssl; Maintainer for openssl is Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>; Source for openssl is src:openssl (PTS, buildd, popcon).

Reported by: Alessandro Razeto <eto@linux.it>

Date: Thu, 25 Mar 2004 18:03:02 UTC

Severity: important

Tags: sid

Found in version 0.9.7d-1

Fixed in versions 0.9.8c-4etch1, openssl/0.9.8c-4

Done: Kurt Roeckx <kurt@roeckx.be>

Bug is archived. No further changes may be made.

Forwarded to openssl-bugs@openssl.org

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Christoph Martin <christoph.martin@uni-mainz.de>:
Bug#240072; Package openssl. (full text, mbox, link).


Acknowledgement sent to Alessandro Razeto <eto@linux.it>:
New Bug report received and forwarded. Copy sent to Christoph Martin <christoph.martin@uni-mainz.de>. (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Alessandro Razeto <eto@linux.it>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: openssl: "engine dynamic -pre" segfaults
Date: Thu, 25 Mar 2004 18:49:08 +0100
Package: openssl
Version: 0.9.7d-1
Severity: important
Tags: sid

Using interactive openssl with the following command generate a segfault

OpenSSL> engine dynamic -pre
(dynamic) Dynamic engine loading support
Segmentation fault



-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.24
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8

Versions of packages openssl depends on:
ii  libc6                       2.3.2.ds1-11 GNU C Library: Shared libraries an
ii  libssl0.9.7                 0.9.7d-1     SSL shared libraries
ii  perl                        5.8.3-2      Larry Wall's Practical Extraction 

-- no debconf information



Information forwarded to debian-bugs-dist@lists.debian.org, Christoph Martin <christoph.martin@uni-mainz.de>:
Bug#240072; Package openssl. (full text, mbox, link).


Acknowledgement sent to Gunter Ohrner <debian_bts@CustomCDROM.de>:
Extra info received and forwarded to list. Copy sent to Christoph Martin <christoph.martin@uni-mainz.de>. (full text, mbox, link).


Message #10 received at 240072@bugs.debian.org (full text, mbox, reply):

From: Gunter Ohrner <debian_bts@CustomCDROM.de>
To: Debian Bug Tracking System <240072@bugs.debian.org>
Subject: "openssl ca -policy policy_anything -out newcert.pem -infiles newreq.pem" also kills openssl
Date: Tue, 04 May 2004 01:46:09 +0200
Package: openssl
Version: 0.9.7d-1
Severity: normal
Followup-For: Bug #240072

Core was generated by `openssl ca -policy policy_anything -out
newcert.pem -infiles newreq.pem'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/i686/cmov/libssl.so.0.9.7...(no debugging
symbols found)...done.
Loaded symbols for /usr/lib/i686/cmov/libssl.so.0.9.7
Reading symbols from /usr/lib/i686/cmov/libcrypto.so.0.9.7...(no
debugging symbols found)...done.
Loaded symbols for /usr/lib/i686/cmov/libcrypto.so.0.9.7
Reading symbols from /lib/libdl.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libc.so.6...(no debugging symbols
found)...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x0807b5aa in password_callback ()


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (400, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.26-backstreet-ruby.uu.20040427.3
Locale: LANG=de_DE@euro, LC_CTYPE=de_DE@euro

Versions of packages openssl depends on:
ii  libc6                       2.3.2.ds1-12 GNU C Library: Shared libraries an
ii  libssl0.9.7                 0.9.7d-1     SSL shared libraries
ii  perl                        5.8.3-3      Larry Wall's Practical Extraction 

-- no debconf information



Reply sent to Christoph Martin <martin@uni-mainz.de>:
You have marked Bug as forwarded. (full text, mbox, link).


Message #13 received at 240072-forwarded@bugs.debian.org (full text, mbox, reply):

From: Christoph Martin <martin@uni-mainz.de>
To: openssl-bugs@openssl.org
Cc: 240072-forwarded@bugs.debian.org
Subject: [Fwd: Bug#240072: openssl: "engine dynamic -pre" segfaults]
Date: Mon, 09 May 2005 10:08:47 +0200
[Message part 1 (text/plain, inline)]
Hi,

this problem is still present in the just released version 0.9.7g.

Christoph
--
============================================================================
Christoph Martin, EDV der Verwaltung, Uni-Mainz, Germany
 Internet-Mail:  Christoph.Martin@Uni-Mainz.DE
  Telefon: +49-6131-3926337
[Bug#240072: openssl: "engine dynamic -pre" segfaults (message/rfc822, inline)]
From: Alessandro Razeto <eto@linux.it>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Bug#240072: openssl: "engine dynamic -pre" segfaults
Date: Thu, 25 Mar 2004 18:49:08 +0100
Package: openssl
Version: 0.9.7d-1
Severity: important
Tags: sid

Using interactive openssl with the following command generate a segfault

OpenSSL> engine dynamic -pre
(dynamic) Dynamic engine loading support
Segmentation fault



-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.24
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8

Versions of packages openssl depends on:
ii  libc6                       2.3.2.ds1-11 GNU C Library: Shared libraries an
ii  libssl0.9.7                 0.9.7d-1     SSL shared libraries
ii  perl                        5.8.3-2      Larry Wall's Practical Extraction

-- no debconf information

[signature.asc (application/pgp-signature, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>:
Bug#240072; Package openssl. (full text, mbox, link).


Acknowledgement sent to Jason Cormie <jason@wormwood666.demon.co.uk>:
Extra info received and forwarded to list. Copy sent to Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>. (full text, mbox, link).


Message #18 received at 240072@bugs.debian.org (full text, mbox, reply):

From: Jason Cormie <jason@wormwood666.demon.co.uk>
To: Debian Bug Tracking System <240072@bugs.debian.org>
Subject: openssl: doesnt segfault for me
Date: Thu, 13 Mar 2008 00:31:47 +0000
Package: openssl
Followup-For: Bug #240072


If I run "OPENSSL> engine dynamic -pre" I get the help, because I've not put a
cmd in after -pre.

If I do put a command in it works, so no fault found...

Maybe extra error trapping has been put in place to handle missing
commands?


-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (x86_64)

Kernel: Linux 2.6.24-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages openssl depends on:
ii  libc6                  2.7-6             GNU C Library: Shared libraries
ii  libssl0.9.8            0.9.8g-4          SSL shared libraries
ii  zlib1g                 1:1.2.3.3.dfsg-11 compression library - runtime

openssl recommends no packages.

-- debconf-show failed

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.





Reply sent to Kurt Roeckx <kurt@roeckx.be>:
You have taken responsibility. (full text, mbox, link).


Notification sent to Alessandro Razeto <eto@linux.it>:
Bug acknowledged by developer. (full text, mbox, link).


Message #23 received at 240072-done@bugs.debian.org (full text, mbox, reply):

From: Kurt Roeckx <kurt@roeckx.be>
To: Jason Cormie <jason@wormwood666.demon.co.uk>, 240072-done@bugs.debian.org
Subject: Re: [Pkg-openssl-devel] Bug#240072: openssl: doesnt segfault for me
Date: Sun, 16 Mar 2008 14:27:21 +0100
Version: 0.9.8c-4etch1

On Thu, Mar 13, 2008 at 12:31:47AM +0000, Jason Cormie wrote:
> Package: openssl
> Followup-For: Bug #240072
> 
> 
> If I run "OPENSSL> engine dynamic -pre" I get the help, because I've not put a
> cmd in after -pre.
> 
> If I do put a command in it works, so no fault found...
> 
> Maybe extra error trapping has been put in place to handle missing
> commands?

I can reproduce it with the version from sarge (0.9.7e-3sarge4), but not
with the one from etch (0.9.8c-4etch1), so I'm closing it.


Kurt





Added tag(s) jessie. Request was from Julien Cristau <jcristau@debian.org> to control@bugs.debian.org. (Thu, 18 Apr 2013 17:45:00 GMT) (full text, mbox, link).


Removed tag(s) jessie. Request was from Andreas Beckmann <anbe@debian.org> to control@bugs.debian.org. (Fri, 01 Nov 2013 01:21:13 GMT) (full text, mbox, link).


Marked as fixed in versions openssl/0.9.8c-4. Request was from Andreas Beckmann <anbe@debian.org> to control@bugs.debian.org. (Fri, 01 Nov 2013 01:21:13 GMT) (full text, mbox, link).


Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Fri, 29 Nov 2013 07:43:22 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Oct 11 00:26:11 2017; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.