[Bug 1404029] [NEW] Segfault in openssl command line utility

[smpahlman]

Public bug reported:


openssl (1.0.1-4ubuntu5.20) on 12.04(.5) crashes with segfault when attempting to decrypt a malformed SMIME file. The reproducer is attached and the command line which yields the crash is:

$ openssl smime -decrypt -inkey /tmp/private_key.pem < /tmp/sample.smime

Upstream openssl seems to correctly report an error when reading the
file.

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "Reproducer"
   https://bugs.launchpad.net/bugs/1404029/+attachment/4283802/+files/sample.smime

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1404029

Title:
  Segfault in openssl command line utility

Status in openssl package in Ubuntu:
  New

Bug description:
  
  openssl (1.0.1-4ubuntu5.20) on 12.04(.5) crashes with segfault when attempting to decrypt a malformed SMIME file. The reproducer is attached and the command line which yields the crash is:

  $ openssl smime -decrypt -inkey /tmp/private_key.pem <
  /tmp/sample.smime

  Upstream openssl seems to correctly report an error when reading the
  file.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1404029/+subscriptions