[Bug 1574372] Re: sbsign crashes randomly

[James Johnston]

I am also having this problem on Ubuntu 16.04.  I was not having this
problem in 15.10 so maybe it's a regression.  I'm attaching a test case
that fails for me on Ubuntu 16.04 with sbsigntool 0.6-0ubuntu10,
libssl1.0.0 1.0.2g-1ubuntu4.1.

It's truly random because successive invocations of sbsign with
identical parameters may or may not crash.  Obviously some undefined
behavior.  If it fails, I get this error:

warning: overwriting existing signature
Segmentation fault (core dumped)

The warning is in error, because there is NOT an existing signature.
This random misidentification is probably part of the problem.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sbsigntool in Ubuntu.
https://bugs.launchpad.net/bugs/1574372

Title:
  sbsign crashes randomly

Status in sbsigntool package in Ubuntu:
  Confirmed

Bug description:
  The sbsign program in Ubuntu 16.04 is segfaulting randomly:

  root at gil:/home/ubuntu# /usr/bin/sbsign --key //etc/refind.d/keys/refind_local.key --cert //etc/refind.d/keys/refind_local.crt --output /tmp/refind_local/refind_x64.efi /usr/share/refind/refind/refind_x64.efi
  warning: data remaining[204288 vs 227742]: gaps between PE/COFF sections?
  warning: data remaining[204288 vs 227744]: gaps between PE/COFF sections?
  warning: overwriting existing signature
  Segmentation fault (core dumped)
  root at gil:/home/ubuntu# /usr/bin/sbsign --key //etc/refind.d/keys/refind_local.key --cert //etc/refind.d/keys/refind_local.crt --output /tmp/refind_local/refind_x64.efi /usr/share/refind/refind/refind_x64.efi
  warning: data remaining[204288 vs 227742]: gaps between PE/COFF sections?
  warning: data remaining[204288 vs 227744]: gaps between PE/COFF sections?
  root at gil:/home/ubuntu# /usr/bin/sbsign --key //etc/refind.d/keys/refind_local.key --cert //etc/refind.d/keys/refind_local.crt --output /tmp/refind_local/refind_x64.efi /usr/share/refind/refind/refind_x64.efi
  warning: data remaining[204288 vs 227742]: gaps between PE/COFF sections?
  warning: data remaining[204288 vs 227744]: gaps between PE/COFF sections?
  root at gil:/home/ubuntu# /usr/bin/sbsign --key //etc/refind.d/keys/refind_local.key --cert //etc/refind.d/keys/refind_local.crt --output /tmp/refind_local/refind_x64.efi /usr/share/refind/refind/refind_x64.efi
  warning: data remaining[204288 vs 227742]: gaps between PE/COFF sections?
  warning: data remaining[204288 vs 227744]: gaps between PE/COFF sections?
  root at gil:/home/ubuntu# /usr/bin/sbsign --key //etc/refind.d/keys/refind_local.key --cert //etc/refind.d/keys/refind_local.crt --output /tmp/refind_local/refind_x64.efi /usr/share/refind/refind/refind_x64.efi
  warning: data remaining[204288 vs 227742]: gaps between PE/COFF sections?
  warning: data remaining[204288 vs 227744]: gaps between PE/COFF sections?
  warning: overwriting existing signature
  Segmentation fault (core dumped)

  Note that on two of those five runs, the program segfaulted. This
  problem is new with Ubuntu 16.04; it did not occur with Ubuntu 16.04
  or 15.10.

  Here's my version information:

  $ lsb_release -rd
  Description:	Ubuntu 16.04 LTS
  Release:	16.04

  $ apt-cache policy sbsigntool
  sbsigntool:
    Installed: 0.6-0ubuntu10
    Candidate: 0.6-0ubuntu10
    Version table:
   *** 0.6-0ubuntu10 500
          500 http://nessus.rodsbooks.com/ubuntu xenial/main amd64 Packages
          100 /var/lib/dpkg/status

  I'm attaching a crash dump from /var/crash.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions