Re: svn client crash using DIGEST-MD5

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



The big difference that I notice looking at the alpine packages is that in 3.17 (crashes) cyrus-sasl-digestmd5 depends on "libcrypto3" and in 3.16 (works) cyrus-sasl-digestmd5 depends on "libcrypto1.1"

https://pkgs.alpinelinux.org/package/v3.17/main/x86_64/cyrus-sasl-digestmd5
https://pkgs.alpinelinux.org/package/v3.16/main/x86_64/cyrus-sasl-digestmd5

Christopher Hardekopf
Software Engineer
chrish@basis.cloud
BASIS International Ltd.
+1.505.345.5232 Main


On Wed, Jan 4, 2023 at 6:47 AM Chris Hardekopf <chrish@basis.cloud> wrote:
For more information. I tried this a couple of different ways and using docker found that it works fine in

alpine:3.16

and crashes in

alpine:3.17

Christopher Hardekopf
Software Engineer
chrish@basis.cloud
BASIS International Ltd.
+1.505.345.5232 Main


On Wed, Jan 4, 2023 at 6:39 AM chrish via SASL <sasl@xxxxxxxxxxxxxxxxxx> wrote:
I am trying to use svn with an svn server using DIGEST-MD5 sasl authentication and after a system update my client is now crashing inside of the authentication. For example:

$ svn info svn://<host>/<archive>
zsh: segmentation fault (core dumped)  svn info svn://<host>/<archive>

I can see using "journalctl" that it crashed inside of the DIGEST-MD5 authentication:

Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 client step 2
Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 parse_server_challenge()
Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 ask_user_info()
Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 make_client_response()
Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 create_layer_keys()
Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 client step 3
Jan 04 06:30:08 neji audit[66195]: ANOM_ABEND auid=1000 uid=1000 gid=1000 ses=4 pid=66195 comm="svn" exe="/usr/bin/svn" sig=11 res=1
Jan 04 06:30:08 neji kernel: svn[66195]: segfault at 10 ip 00007fa821bcf934 sp 00007ffe383c8a90 error 4 in libcrypto.so.3[7fa821aeb000+268000]
Jan 04 06:30:08 neji kernel: Code: 41 54 55 53 48 83 ec 28 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 85 d2 0f 84 9d 01 00 00 c7 02 00 00 00 00 48 89 d5 <8b> 57 10 48 89 fb 85 d2 0f 85 e6 00 00 00 48 8b 07 48 85 c0 0f 84
Jan 04 06:30:08 neji kernel: audit: type=1701 audit(1672839008.147:339): auid=1000 uid=1000 gid=1000 ses=4 pid=66195 comm="svn" exe="/usr/bin/svn" sig=11 res=1
Jan 04 06:30:08 neji audit: BPF prog-id=70 op=LOAD
Jan 04 06:30:08 neji audit: BPF prog-id=71 op=LOAD
Jan 04 06:30:08 neji audit: BPF prog-id=72 op=LOAD
Jan 04 06:30:08 neji systemd[1]: Started Process Core Dump (PID 66223/UID 0).
Jan 04 06:30:08 neji audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@4-66223-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.200:340): prog-id=70 op=LOAD
Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.200:341): prog-id=71 op=LOAD
Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.200:342): prog-id=72 op=LOAD
Jan 04 06:30:08 neji kernel: audit: type=1130 audit(1672839008.200:343): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@4-66223-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 04 06:30:08 neji systemd-coredump[66224]: Process 66195 (svn) of user 1000 dumped core.
                                             
                                              Stack trace of thread 66195:
                                              #0  0x00007fa821bcf934 EVP_DecryptUpdate (libcrypto.so.3 + 0x195934)
                                              #1  0x00007fa822557545 n/a (libdigestmd5.so + 0x3545)
                                              #2  0x00007fa822558591 n/a (libdigestmd5.so + 0x4591)
                                              #3  0x00007fa82220bfdb _plug_decode (libsasl2.so.3 + 0x14fdb)
                                              #4  0x00007fa82255e197 n/a (libdigestmd5.so + 0xa197)
                                              #5  0x00007fa822201938 sasl_decode (libsasl2.so.3 + 0xa938)
                                              #6  0x00007fa822221ac4 n/a (libsvn_ra_svn-1.so.0 + 0xbac4)
                                              #7  0x00007fa82222dbe1 svn_ra_svn__stream_read (libsvn_ra_svn-1.so.0 + 0x17be1)
                                              #8  0x00007fa8222218a3 n/a (libsvn_ra_svn-1.so.0 + 0xb8a3)
                                              #9  0x00007fa8222221da n/a (libsvn_ra_svn-1.so.0 + 0xc1da)
                                              #10 0x00007fa82222cdc3 svn_ra_svn__read_item (libsvn_ra_svn-1.so.0 + 0x16dc3)
                                              #11 0x00007fa82222cf3b svn_ra_svn__read_tuple (libsvn_ra_svn-1.so.0 + 0x16f3b)
                                              #12 0x00007fa82222d398 svn_ra_svn__read_cmd_response (libsvn_ra_svn-1.so.0 + 0x17398)
                                              #13 0x00007fa822232b14 n/a (libsvn_ra_svn-1.so.0 + 0x1cb14)
                                              #14 0x00007fa82221e6e0 n/a (libsvn_ra_svn-1.so.0 + 0x86e0)
                                              #15 0x00007fa82288fa90 svn_ra_open5 (libsvn_ra-1.so.0 + 0x7a90)
                                              #16 0x00007fa8229c2f03 svn_client__open_ra_session_internal (libsvn_client-1.so.0 + 0x68f03)
                                              #17 0x00007fa8229c89c2 svn_client__ra_session_from_path2 (libsvn_client-1.so.0 + 0x6e9c2)
                                              #18 0x00007fa82299f4df svn_client_info4 (libsvn_client-1.so.0 + 0x454df)
                                              #19 0x0000558b02290ca7 n/a (svn + 0x1aca7)
                                              #20 0x0000558b022a4e7a n/a (svn + 0x2ee7a)
                                              #21 0x0000558b022830ee n/a (svn + 0xd0ee)
                                              #22 0x00007fa8225b2290 n/a (libc.so.6 + 0x23290)
                                              #23 0x00007fa8225b234a __libc_start_main (libc.so.6 + 0x2334a)
                                              #24 0x0000558b02283175 n/a (svn + 0xd175)
                                              ELF object binary architecture: AMD x86-64
Jan 04 06:30:08 neji systemd[1]: systemd-coredump@4-66223-0.service: Deactivated successfully.
Jan 04 06:30:08 neji kernel: audit: type=1131 audit(1672839008.264:344): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@4-66223-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 04 06:30:08 neji audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@4-66223-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 04 06:30:08 neji audit: BPF prog-id=0 op=UNLOAD
Jan 04 06:30:08 neji audit: BPF prog-id=0 op=UNLOAD
Jan 04 06:30:08 neji audit: BPF prog-id=0 op=UNLOAD
Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.420:345): prog-id=0 op=UNLOAD
Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.420:346): prog-id=0 op=UNLOAD
Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.420:347): prog-id=0 op=UNLOAD
Jan 04 06:30:08 neji svn[66262]: DIGEST-MD5 common mech free
Jan 04 06:30:08 neji svn[66280]: DIGEST-MD5 common mech free
Jan 04 06:30:08 neji svn[66285]: DIGEST-MD5 common mech free
Jan 04 06:30:09 neji svn[66291]: DIGEST-MD5 common mech free
Jan 04 06:30:09 neji svn[66313]: DIGEST-MD5 common mech free
Jan 04 06:30:09 neji svn[66319]: DIGEST-MD5 common mech free
Jan 04 06:30:09 neji svn[66325]: DIGEST-MD5 common mech free
Jan 04 06:30:09 neji svn[66331]: DIGEST-MD5 common mech free
Jan 04 06:30:09 neji svn[66337]: DIGEST-MD5 common mech free
Jan 04 06:30:09 neji svn[66343]: DIGEST-MD5 common mech free
Jan 04 06:30:09 neji svn[66349]: DIGEST-MD5 common mech free
Jan 04 06:30:09 neji svn[66358]: DIGEST-MD5 common mech free




[Index of Archives]     [Info Cyrus]     [Squirrel Mail]     [Linux Media]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux