[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: autoca SEGV with OpenSSL 1.1

--On Wednesday, April 19, 2017 8:26 PM +0100 Howard Chu <hyc@symas.com> wrote: 


Quanah Gibson-Mount wrote:

The new autoca overlay is broken with OpenSSL 1.1 after fixing the code
to pull in the correct headers.  Specifically, we get a segfault in the
OpenSSL's libcrypto.  Looking at the docs, it appears the code is
correct on the OpenLDAP side of things?  So perhaps a bug in OpenSSL
(I'm using 1.1.0e, the latest release).  Backtrace shows:


OpenSSL 1.1.0e works fine for me. Self-compiled from OpenSSL git repo.

Just to be sure, do an "info shared" in gdb and show which shared
libraries slapd is running with.


Did you use "no-deprecated" as an option when compiling?

"info shared" looks good to me:

(gdb) info shared

From                To                  Syms Read   Shared Object Library
0x00007f797bdf1200 0x00007f797be34d58 Yes /home/build/git/symas-packages/thirdparty/openldap/build/UBUNTU12_64/symas-openldap/libraries/libldap_r/.libs/libldap_r-2-devel.so.0 0x00007f797bbd5890 0x00007f797bbdf018 Yes /home/build/git/symas-packages/thirdparty/openldap/build/UBUNTU12_64/symas-openldap/libraries/liblber/.libs/liblber-2-devel.so.0 0x00007f797b9caeb0 0x00007f797b9cf148 Yes (*) /opt/symas/common/lib/libltdl.so.7 0x00007f797b7b1740 0x00007f797b7bd358 Yes (*) /lib/x86_64-linux-gnu/libpthread.so.0 0x00007f797b593ef0 0x00007f797b5a5758 Yes (*) /opt/symas/common/lib/libsasl2.so.3 0x00007f797b18a000 0x00007f797b2f60d8 Yes /opt/symas/common/lib/libcrypto.so.1.1 0x00007f797aee7a70 0x00007f797aeee008 Yes (*) /lib/x86_64-linux-gnu/libcrypt.so.1 0x00007f797ab48020 0x00007f797ac8b230 Yes (*) /lib/x86_64-linux-gnu/libc.so.6 0x00007f797a910990 0x00007f797a9211f8 Yes (*) /lib/x86_64-linux-gnu/libresolv.so.2 0x00007f797a6bb620 0x00007f797a6f24f8 Yes /opt/symas/common/lib/libssl.so.1.1 0x00007f797a4a0de0 0x00007f797a4a1918 Yes (*) /lib/x86_64-linux-gnu/libdl.so.2 0x00007f797c048af0 0x00007f797c062e6a Yes (*) /lib64/ld-linux-x86-64.so.2 0x00007f797a296140 0x00007f797a29c588 Yes (*) /lib/x86_64-linux-gnu/libnss_files.so.2 0x00007f797a08fee0 0x00007f797a091cd8 Yes (*) /opt/symas/common/lib/sasl2/liblogin.so.3 0x00007f7979e89fd0 0x00007f7979e8c468 Yes (*) /opt/symas/common/lib/sasl2/libcrammd5.so.3 0x00007f7979c84f20 0x00007f7979c86de8 Yes (*) /opt/symas/common/lib/sasl2/libplain.so.3 0x00007f7979a7b230 0x00007f7979a807e8 Yes (*) /opt/symas/common/lib/sasl2/libscram.so.3 0x00007f7979873880 0x00007f7979877778 Yes (*) /opt/symas/common/lib/sasl2/libgssapiv2.so.3 0x00007f7979640c30 0x00007f7979666178 Yes (*) /opt/symas/common/lib/libgssapi.so.3 0x00007f797942ca70 0x00007f797942ff38 Yes (*) /opt/symas/common/lib/libheimntlm.so.0 0x00007f79791bc4f0 0x00007f7979208a98 Yes (*) /opt/symas/common/lib/libkrb5.so.26 0x00007f7978f1db50 0x00007f7978f880d8 Yes (*) /opt/symas/common/lib/libasn1.so.8 0x00007f7978d00af0 0x00007f7978d02118 Yes (*) /opt/symas/common/lib/libcom_err.so.1 0x00007f7978acfb20 0x00007f7978aee478 Yes (*) /opt/symas/common/lib/libhcrypto.so.4 0x00007f79788b7e10 0x00007f79788c3348 Yes (*) /opt/symas/common/lib/libroken.so.18 0x00007f797868afe0 0x00007f797868c808 Yes (*) /opt/symas/common/lib/libwind.so.0 0x00007f797847d990 0x00007f7978485458 Yes (*) /opt/symas/common/lib/libheimbase.so.1 0x00007f7978242110 0x00007f79782685b8 Yes (*) /opt/symas/common/lib/libhx509.so.5 0x00007f7977f94b10 0x00007f7978012398 Yes (*) /opt/symas/common/lib/libheimsqlite.so.0 0x00007f7977d83b40 0x00007f7977d88328 Yes (*) /opt/symas/common/lib/sasl2/libgs2.so.3 0x00007f7977b7df40 0x00007f7977b7fb98 Yes (*) /opt/symas/common/lib/sasl2/libanonymous.so.3 0x00007f79779707d0 0x00007f7977979228 Yes (*) /opt/symas/common/lib/sasl2/libdigestmd5.so.3 0x00007f7975f1d290 0x00007f7975f4a158 Yes /home/build/git/symas-packages/thirdparty/openldap/build/UBUNTU12_64/symas-openldap/tests/../servers/slapd/back-bdb/.libs/back_bdb-2-devel.so.0 0x00007f7975ba0330 0x00007f7975cd6008 Yes (*) /opt/symas/common/lib/libdb-5.2.so 0x00007f7975979aa0 0x00007f797597c698 Yes /home/build/git/symas-packages/thirdparty/openldap/build/UBUNTU12_64/symas-openldap/tests/../servers/slapd/overlays/.libs/autoca-2-devel.so.0 
(*): Shared library is missing debugging information.



--Quanah


--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>