[Bug 231238] [libcrypto] /lib/libcrypto.so.7 causes crash with sasl2/libntlm.so3

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Sep 8 12:36:32 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=231238

            Bug ID: 231238
           Summary: [libcrypto] /lib/libcrypto.so.7 causes crash with
                    sasl2/libntlm.so3
           Product: Base System
           Version: 10.4-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: bugs at FreeBSD.org
          Reporter: fireball at zerouptime.ch

Created attachment 196959
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=196959&action=edit
Cyrus IMAPd core dump

Backtrace of imapd.core:

[New Thread 804c06400 (LWP 100222/<unknown>)]
(gdb) bt
#0  0x00000008017f60aa in EVP_DigestInit_ex () from /lib/libcrypto.so.7
#1  0x00000008017ed1e8 in HMAC_Init_ex () from /lib/libcrypto.so.7
#2  0x00000008086dac5d in V2 () from /usr/local/lib/sasl2/libntlm.so.3
#3  0x00000008086dc41d in ntlm_server_mech_step () from
/usr/local/lib/sasl2/libntlm.so.3
#4  0x000000080127043e in sasl_server_step () from /usr/local/lib/libsasl2.so.3
#5  0x0000000800ac0074 in saslserver () from /usr/local/lib/libcyrus_imap.so.0
#6  0x000000000040dcd5 in shut_down ()
#7  0x000000000040cfcf in shut_down ()
#8  0x000000000042848c in cyrus_mutex_free ()

Packages involved:
cyrus-imapd25-2.5.11_2 
cyrus-sasl-2.1.26_13 

Found the issue happening only with certain ciphers:

Sep  8 07:09:20 mail imaps[50889]: inittls: Loading hard-coded DH parameters
Sep  8 07:09:20 mail imaps[50889]: starttls: TLSv1.2 with cipher
ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) no authentication
Sep  8 07:09:20 mail imaps[50889]: client id: "vendor" "Microsoft" "os"
"Windows Mobile" "os-version" "10.0" "guid"
"38443130353438433135343232414446454346424341393941453546314437354639343132353141"
Sep  8 07:09:24 mail master[39154]: process type:SERVICE name:imaps
path:/usr/local/cyrus/bin/imapd age:3.598s pid:50889 signaled to death by
signal 11 (Segmentation fault, core dumped)

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list