Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 08 Sep 2018 12:36:29 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 231238] [libcrypto] /lib/libcrypto.so.7 causes crash with sasl2/libntlm.so3
Message-ID:  <bug-231238-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D231238

            Bug ID: 231238
           Summary: [libcrypto] /lib/libcrypto.so.7 causes crash with
                    sasl2/libntlm.so3
           Product: Base System
           Version: 10.4-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: fireball@zerouptime.ch

Created attachment 196959
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D196959&action=
=3Dedit
Cyrus IMAPd core dump

Backtrace of imapd.core:

[New Thread 804c06400 (LWP 100222/<unknown>)]
(gdb) bt
#0  0x00000008017f60aa in EVP_DigestInit_ex () from /lib/libcrypto.so.7
#1  0x00000008017ed1e8 in HMAC_Init_ex () from /lib/libcrypto.so.7
#2  0x00000008086dac5d in V2 () from /usr/local/lib/sasl2/libntlm.so.3
#3  0x00000008086dc41d in ntlm_server_mech_step () from
/usr/local/lib/sasl2/libntlm.so.3
#4  0x000000080127043e in sasl_server_step () from /usr/local/lib/libsasl2.=
so.3
#5  0x0000000800ac0074 in saslserver () from /usr/local/lib/libcyrus_imap.s=
o.0
#6  0x000000000040dcd5 in shut_down ()
#7  0x000000000040cfcf in shut_down ()
#8  0x000000000042848c in cyrus_mutex_free ()

Packages involved:
cyrus-imapd25-2.5.11_2=20
cyrus-sasl-2.1.26_13=20

Found the issue happening only with certain ciphers:

Sep  8 07:09:20 mail imaps[50889]: inittls: Loading hard-coded DH parameters
Sep  8 07:09:20 mail imaps[50889]: starttls: TLSv1.2 with cipher
ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) no authentication
Sep  8 07:09:20 mail imaps[50889]: client id: "vendor" "Microsoft" "os"
"Windows Mobile" "os-version" "10.0" "guid"
"38443130353438433135343232414446454346424341393941453546314437354639343132=
353141"
Sep  8 07:09:24 mail master[39154]: process type:SERVICE name:imaps
path:/usr/local/cyrus/bin/imapd age:3.598s pid:50889 signaled to death by
signal 11 (Segmentation fault, core dumped)

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-231238-227>