[Pkg-gnutls-maint] Bug#429183: /usr/bin/gnutls-cli: segfaults when doing starttls against smtp.hispeed.ch

[Marc Haber]

Package: gnutls-bin
Version: 1.6.3-1
Severity: normal
File: /usr/bin/gnutls-cli

Hi,

$ gnutls-cli -p 25 -s smtp.hispeed.ch
Resolving 'smtp.hispeed.ch'...
Connecting to '213.46.255.24:25'...

- Simple Client Mode:

220 smtp.hispeed.ch ESMTP server (InterMail vM.7.08.02.00 201-2186-121-20061213) ready Sat, 16 Jun 2007 10:42:25 +0200
EHLO zugschlus.de
250-smtp.hispeed.ch
250-HELP
250-XREMOTEQUEUE
250-ETRN
250-AUTH=LOGIN PLAIN
250-AUTH LOGIN PLAIN
250-PIPELINING
250-DSN
250-8BITMIME
250-STARTTLS
250 SIZE 15360000
STARTTLS
220 Ready to start TLS
*** Starting TLS handshake
*** Fatal error: A record packet with illegal version was received.
*** Handshake has failed
Segmentation fault
$

The "record packet with illegal version was received" sounds familiar
and might be a bug already known, but gnutls-cli should definetely not
segfault in this situation.

Greetings
Marc

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.21.5-scyw00225 (PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gnutls-bin depends on:
ii  libc6                         2.5-11     GNU C Library: Shared libraries
ii  libgcrypt11                   1.2.4-2    LGPL Crypto library - runtime libr
ii  libgnutls13                   1.6.3-1    the GNU TLS library - runtime libr
ii  libgpg-error0                 1.4-2      library for common error values an
ii  libopencdk8                   0.5.13-2   Open Crypto Development Kit (OpenC
ii  libtasn1-3                    0.3.9-1    Manage ASN.1 structures (runtime)

gnutls-bin recommends no packages.

-- no debconf information