Bug#402665: [Pkg-gnutls-maint] Bug#402665: STARTTLS causes segfault

[Peter Chubb]

>>>>> "James" == James Westby <jw+debian at jameswestby.net> writes:


James> Unfortunately the traces you provided are not that
James> informative. It would be great to get some more information on
James> the connection.


It was:
	telnet mx.chubb.wattle.id.au 25
	ehlo croc
	starttls
and the server died.  It *should* return 220 TLS go ahead.  It's dying
*before* the TLS handshake starts.


I tried to reproduce the bug (reinstalled 1.4.4-3) and the problem has
stopped occurring.  I *hate* bugs like that.


James>   * Do you have anything strange in the setup? Could I have
James> your config if there is nothing private in it so that I can set
James> up test server to beat up?

The setup is a standard Debian system, with sa_exim and
exim-daemon-heavy, with the parts in
conf.d/auth/30_exim4-config_examples uncommented to allow AUTH PLAIN
and AUTH LOGIN. 

I'd rather the config wasn't kept on a website forever, so I'll put it
up at http://gelato.unsw.edu.au/~peterc/exim4-conf.tar.bz2; let me
know when you've fetched it.

Other info:  the failing site is a virtual x86 machine under Xen, but
this shouldn't make any difference.

The libgnutls13 package that works is 1.4.2-1 

dpkg -l libgnutls13
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name           Version        Description
+++-==============-==============-============================================
ii  libgnutls13    1.4.2-1        the GNU TLS library - runtime library


--
Dr Peter Chubb  http://www.gelato.unsw.edu.au  peterc AT gelato.unsw.edu.au
http://www.ertos.nicta.com.au           ERTOS within National ICT Australia