[Bug 972783] Re: Crashes with segmentation fault operating asn1_meth_table

[Colin Watson]

The linked esteid bug only mentions success on Fedora, and an
unspecified version.  Exactly what other distributions and versions of
OpenSSL has this been verified on either way?  Does it happen using the
current OpenSSL packages in Debian unstable?  Does it happen using
unpatched OpenSSL upstream source with the same compiler flags as used
in Debian?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/972783

Title:
  Crashes with segmentation fault operating asn1_meth_table

Status in “openssl” package in Ubuntu:
  Confirmed

Bug description:
  Trying to update Server Access Certificate with DigiDoc client for
  Estonian ID cards crashes implicating an OpenSSL problem.

  The problem has been there from OpenSSL 1.0.0, but does not happen
  using OpenSSL 0.9.8.

  Debugging with Valgrind gives variety of:

  Invalid free() / delete / delete[] / realloc()
  Invalid write of size n
  Invalid read of size n

  The context is:

  ==5779==    at 0x402B06C: free (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
  ==5779==    by 0x6A818C9: CRYPTO_free (mem.c:393)
  ==5779==    by 0x6AEB82A: engine_free_util (eng_lib.c:136)
  ==5779==    by 0x6AEC798: engine_unlocked_finish (eng_init.c:112)
  ==5779==    by 0x6AED607: engine_table_register (eng_table.c:178)
  ==5779==    by 0x6AEFC7A: ENGINE_set_default_pkey_asn1_meths (tb_asnmth.c:106)
  ==5779==    by 0x6AEE3B7: ENGINE_set_default (eng_fat.c:96)

  I'm currently testing it on Ubuntu 12.04 beta 2 with

  * opensc 0.12.1-1ubuntu4
  * libssl1.0.0 1.0.1-2ubuntu4
  * qdigidoc 0.4.0-0ubuntu4

  The problem has been also tested on Oneiric and discussed in some
  length at: http://code.google.com/p/esteid/issues/detail?id=168

  I attach also some debug logs.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/972783/+subscriptions