Bug#412886: RFH gnutls related crash of exim4 on x86_64 (Bug#412886)

[Ronny Adsetts]

Simon Josefsson said at 15/05/2007 21:53:
> On 15 maj 2007, at 22.24, Ronny Adsetts wrote:
>> Simon Josefsson said at 15/05/2007 20:53:
>> [snip lots of helpful debug data]
>>>>
>>>> Please let me know if you want any more information.
>>>
>>> If you can reproduce the crash in gdb, try getting a backtrace using 'bt
>>> full', and invoke 'up' until you are in the _gnutls_recv_handshake stack
>>> frame, then 'p recv_type'.  If it is indeed
>>> GNUTLS_HANDSHAKE_CLIENT_HELLO or GNUTLS_HANDSHAKE_SERVER_HELLO then I
>>> think we have diagnosed the cause.
>> [...]
>>
>> Simon, thanks for your help so far.
>>
>> Assuming the delivery starts again, it stopped this morning, it'll
>> keep trying every hour for about three days...
>>
>> Unless you know if it's possible to take a tcpdump and recreate the
>> transaction?
> 
> Yes, do try to get a tcpdump trace of the session.  It may not be
> possible to recreate the transaction with live code, but at least we can
> look at what the other end is sending, and especially if it is sending a
> client hello again when GnuTLS expects something else.

I have tcpdumps from a couple of earlier crashing sessions. They're attached to the Cc'd Debian bug:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=412886;msg=15;filename=20070228_190841_crasher.pcap;att=1
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=412886;msg=20;filename=20070228_200842_crasher.pcap;att=1

Hopefully that'll be helpful.

NB. My posts are being rejected from gnutls-dev at gnupg.org so I assume the list is subscriber only

Ronny
-- 
Ronny Adsetts
Technical Director
Amazing Internet Ltd, London
t: +44 20 8607 9535
f: +44 20 8607 9536
w: www.amazinginternet.com

Registered office: UK House, 82 Heath Road, Twickenham TW1 4BW
Registered in England. Company No. 4042957 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-exim4-maintainers/attachments/20070516/0c7075a6/attachment.pgp