[Bug 1974037] [NEW] openssl: EVP_EC_gen() segfault without init

[Simon Chopin]

Public bug reported:

Imported from Debian bug http://bugs.debian.org/1010958:

Source: sscg
Version: 3.0.2-1
Severity: serious
Tags: ftbfs

https://buildd.debian.org/status/logs.php?pkg=sscg&ver=3.0.2-1%2Bb1

...
 1/10 generate_rsa_key_test FAIL              0.01s   killed by signal 11 SIGSEGV
04:32:21 MALLOC_PERTURB_=87 /<<PKGBUILDDIR>>/obj-x86_64-linux-gnu/generate_rsa_key_test
...

Summary of Failures:

 1/10 generate_rsa_key_test FAIL              0.01s   killed by signal
11 SIGSEGV

Ok:                 9
Expected Fail:      0
Fail:               1
Unexpected Pass:    0
Skipped:            0
Timeout:            0
dh_auto_test: error: cd obj-x86_64-linux-gnu && LC_ALL=C.UTF-8 MESON_TESTTHREADS=4 ninja test returned exit code 1
make: *** [debian/rules:6: binary-arch] Error 25

This has also been reported on the openssl-users mailing list:

https://www.mail-archive.com/openssl-users@openssl.org/msg90830.html

** Affects: openssl (Ubuntu)
     Importance: High
         Status: Confirmed

** Affects: openssl (Ubuntu Jammy)
     Importance: High
         Status: Confirmed

** Affects: openssl (Ubuntu Kinetic)
     Importance: High
         Status: Confirmed

** Affects: openssl (Debian)
     Importance: Undecided
         Status: New

** Bug watch added: Debian Bug tracker #1010958
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010958

** Changed in: openssl (Debian)
 Remote watch: None => Debian Bug tracker #1010958

** Summary changed:

- sscg FTBFS with OpenSSL 3.0.3
+ openssl: EVP_EC_gen() segfault without init

** Description changed:

  Imported from Debian bug http://bugs.debian.org/1010958:
  
  Source: sscg
  Version: 3.0.2-1
  Severity: serious
  Tags: ftbfs
  
  https://buildd.debian.org/status/logs.php?pkg=sscg&ver=3.0.2-1%2Bb1
  
  ...
-  1/10 generate_rsa_key_test FAIL              0.01s   killed by signal 11 SIGSEGV
+  1/10 generate_rsa_key_test FAIL              0.01s   killed by signal 11 SIGSEGV
  04:32:21 MALLOC_PERTURB_=87 /<<PKGBUILDDIR>>/obj-x86_64-linux-gnu/generate_rsa_key_test
  ...
  
  Summary of Failures:
  
-  1/10 generate_rsa_key_test FAIL              0.01s   killed by signal
+  1/10 generate_rsa_key_test FAIL              0.01s   killed by signal
  11 SIGSEGV
  
- 
- Ok:                 9   
- Expected Fail:      0   
- Fail:               1   
- Unexpected Pass:    0   
- Skipped:            0   
- Timeout:            0   
+ Ok:                 9
+ Expected Fail:      0
+ Fail:               1
+ Unexpected Pass:    0
+ Skipped:            0
+ Timeout:            0
  dh_auto_test: error: cd obj-x86_64-linux-gnu && LC_ALL=C.UTF-8 MESON_TESTTHREADS=4 ninja test returned exit code 1
  make: *** [debian/rules:6: binary-arch] Error 25
+ 
+ This has also been reported on the openssl-users mailing list:
+ 
+ https://www.mail-archive.com/openssl-users@openssl.org/msg90830.html

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1974037

Title:
  openssl: EVP_EC_gen() segfault without init

Status in openssl package in Ubuntu:
  Confirmed
Status in openssl source package in Jammy:
  Confirmed
Status in openssl source package in Kinetic:
  Confirmed
Status in openssl package in Debian:
  New

Bug description:
  Imported from Debian bug http://bugs.debian.org/1010958:

  Source: sscg
  Version: 3.0.2-1
  Severity: serious
  Tags: ftbfs

  https://buildd.debian.org/status/logs.php?pkg=sscg&ver=3.0.2-1%2Bb1

  ...
   1/10 generate_rsa_key_test FAIL              0.01s   killed by signal 11 SIGSEGV
  04:32:21 MALLOC_PERTURB_=87 /<<PKGBUILDDIR>>/obj-x86_64-linux-gnu/generate_rsa_key_test
  ...

  Summary of Failures:

   1/10 generate_rsa_key_test FAIL              0.01s   killed by signal
  11 SIGSEGV

  Ok:                 9
  Expected Fail:      0
  Fail:               1
  Unexpected Pass:    0
  Skipped:            0
  Timeout:            0
  dh_auto_test: error: cd obj-x86_64-linux-gnu && LC_ALL=C.UTF-8 MESON_TESTTHREADS=4 ninja test returned exit code 1
  make: *** [debian/rules:6: binary-arch] Error 25

  This has also been reported on the openssl-users mailing list:

  https://www.mail-archive.com/openssl-users@openssl.org/msg90830.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1974037/+subscriptions