bin/174831: geli segfaults with the new locked memory limit default

[Fabian Keil]

Konstantin Belousov <kostikbel at gmail.com> wrote:

> On Fri, Jan 18, 2013 at 01:50:52PM +0400, Andrey Zonov wrote:
> > The code that you copy/pasted is under HAVE_BROKEN_MLOCK.
> > 
> > The code that is executed on my machine is:
> > 
> > gnupg-1.4.13/util/secmem.c:
> > 167 #else
> > 168     err = mlock( p, n );
> > 169     if( err && errno )
> > 170         err = errno;
> > 171 #endif
> > 
> > and it works without errors.
> > 
> > I do not have HAVE_BROKEN_MLOCK in my config.h:
> > 
> > /usr/ports/security/gnupg1/work/gnupg-1.4.13/config.h:/* #undef
> > HAVE_BROKEN_MLOCK */
> > 
> > Try to recompile gnupg and check whether HAVE_BROKEN_MLOCK is defined.

I already tried that but still get the HAVE_BROKEN_MLOCK code path
which makes sense given that mlock() currently doesn't seem to work
on my system.

> FWIW, I use gnupg2 and it stopped complaining about 'using insecure memory'
> without recompilation.

Interesting, I guess there's something wrong with my system then.
I may try to track the problem down in the future, but as I don't
really need mlock() for gpg it's not particular high on my list.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/svn-src-all/attachments/20130118/05c58795/attachment.sig>