gnutls-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[patch] Fix a crash when getting dn of a certificate


From: Vincent Untz
Subject: [patch] Fix a crash when getting dn of a certificate
Date: Mon, 17 Oct 2011 15:19:37 +0200
User-agent: Mutt/1.5.20 (2009-06-14)

Hi,

Somebody stumbled upon this gnutls crash in openSUSE:

*** glibc detected *** /usr/lib/telepathy-haze: free(): invalid pointer: 
0x0000000000a5d900 ***

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff66e9f10 in malloc_consolidate () from /lib64/libc.so.6
(gdb) bt
#0  0x00007ffff66e9f10 in malloc_consolidate () from /lib64/libc.so.6
#1  0x00007ffff66eb0d3 in _int_malloc () from /lib64/libc.so.6
#2  0x00007ffff66ec1d2 in malloc_check () from /lib64/libc.so.6
#3  0x00007ffff66ef11d in calloc () from /lib64/libc.so.6
#4  0x00007ffff7de69ce in _dl_new_object () from /lib64/ld-linux-x86-64.so.2
#5  0x00007ffff7de2196 in _dl_map_object_from_fd () from 
/lib64/ld-linux-x86-64.so.2
#6  0x00007ffff7de3f97 in _dl_map_object () from /lib64/ld-linux-x86-64.so.2
#7  0x00007ffff7dedc2b in dl_open_worker () from /lib64/ld-linux-x86-64.so.2
#8  0x00007ffff7de9bd6 in _dl_catch_error () from /lib64/ld-linux-x86-64.so.2
#9  0x00007ffff7ded7ca in _dl_open () from /lib64/ld-linux-x86-64.so.2
#10 0x00007ffff6785440 in do_dlopen () from /lib64/libc.so.6
#11 0x00007ffff7de9bd6 in _dl_catch_error () from /lib64/ld-linux-x86-64.so.2
#12 0x00007ffff67854df in dlerror_run () from /lib64/libc.so.6
#13 0x00007ffff6785547 in __libc_dlopen_mode () from /lib64/libc.so.6
#14 0x00007ffff67609d5 in init () from /lib64/libc.so.6
#15 0x00007ffff6a103d3 in pthread_once () from /lib64/libpthread.so.0
#16 0x00007ffff6760af4 in backtrace () from /lib64/libc.so.6
#17 0x00007ffff66e3e8f in __libc_message () from /lib64/libc.so.6
#18 0x00007ffff66e9bb6 in malloc_printerr () from /lib64/libc.so.6
#19 0x00007fffece76eb4 in _gnutls_x509_parse_dn (asn1_struct=0x9cbc40, 
asn1_rdn_name=
    0x7fffeced0d68 "tbsCertificate.subject.rdnSequence", buf=0x0, 
sizeof_buf=0x7fffffffd338) at dn.c:287

(from https://bugzilla.novell.com/show_bug.cgi?id=724421)

Here's a patch to fix it.

Cheers,

Vincent

-- 
Les gens heureux ne sont pas pressés.

Attachment: 0001-Correctly-terminate-a-string-with-0-before-concatena.patch
Description: Text Data


reply via email to

[Prev in Thread] Current Thread [Next in Thread]