[Bug 196674] security/keepassx2 bus error on

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196674

Ivan Brawley <ivan at brawley.id.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ivan at brawley.id.au

--- Comment #8 from Ivan Brawley <ivan at brawley.id.au> ---
I've been hit with the same bug with 10.1-RELEASE-p3.

Problem lies in the compiling of cipher/salsa20.c in libgcrypt and/or
keepassx's interaction with the libgcrypt salsa20 routines.

If you compile libgcrypt with "USE_GCC= any" set, keepassx works. If you use
the default CLANG's cc but with "CFLAGS= -O1", keepassx also works.

I've narrowed it down to compiling just the cipher/salsa20.c module in
libgcrypt with "-O1" and the rest with "-O2" will allow keepassx to work.

I've just sent an email to the new maintainer of libgcrypt with that
information (and ugly patch to port's Makefile) as well to consider.

Now the finger pointing.. Is it CLANG's optimizations or libgcrypt's salsa20
code or keepassx calling libgcrypt with bad data?

ivan.
(different ivan).

-- 
You are receiving this mail because:
You are the assignee for the bug.