[Pkg-gnutls-maint] Bug#478191: /usr/bin/gnutls-cli: Fatal error: Internal error in memory allocation.

Sun Apr 27 21:25:32 UTC 2008

Package: gnutls-bin
Version: 2.2.2-1
Severity: normal
File: /usr/bin/gnutls-cli

Hi,

just another exim4 issue which - this time - uncovered an issue in
gnutls-cli and libgnutls. When connecting to mail.campbell-lange.net,
GnuTLS clients crash during TLS handshake. This happens with exim, but
also with gnutls-cli (both from current unstable, but both crashes
also occur with etch clients). The server is running Debian lenny.

Here is the output of gnutls-cli on current sid:
$ gnutls-cli -s -p 25 mail.campbell-lange.net
Resolving 'mail.campbell-lange.net'...
Connecting to '217.147.82.36:25'...

- Simple Client Mode:

220 campbell-lange.net ESMTP Exim 4.69 Sun, 27 Apr 2008 22:22:53 +0100
EHLO nechayev.zugschlus.de
250-campbell-lange.net Hello nechayev.zugschlus.de [83.246.116.35]
250-SIZE 20971520
250-PIPELINING
250-AUTH CRAM-MD5 NTLM
250-STARTTLS
250 HELP
STARTTLS
220 TLS go ahead
*** Starting TLS handshake
*** Fatal error: Internal error in memory allocation.
*** Handshake has failed
*** glibc detected *** gnutls-cli: double free or corruption (fasttop): 0x08072da8 ***
======= Backtrace: =========
/lib/libc.so.6[0xb7e1d007]
/lib/libc.so.6(cfree+0x89)[0xb7e1eca9]
gnutls-cli[0x804d685]
gnutls-cli[0x804ea4f]
/lib/libc.so.6(__libc_start_main+0xe0)[0xb7dcc450]
gnutls-cli[0x804b181]
======= Memory map: ========
08048000-08053000 r-xp 00000000 fd:01 105571     /mnt/usr/usr/bin/gnutls-cli
08053000-08054000 rw-p 0000a000 fd:01 105571     /mnt/usr/usr/bin/gnutls-cli
08054000-0809a000 rw-p 08054000 00:00 0          [heap]
b7c00000-b7c21000 rw-p b7c00000 00:00 0
b7c21000-b7d00000 ---p b7c21000 00:00 0
b7d30000-b7d3c000 r-xp 00000000 03:01 36336      /lib/libgcc_s.so.1
b7d3c000-b7d3d000 rw-p 0000b000 03:01 36336      /lib/libgcc_s.so.1
b7d3d000-b7d4b000 r-xp 00000000 03:01 36463      /lib/libresolv-2.7.so
b7d4b000-b7d4d000 rw-p 0000d000 03:01 36463      /lib/libresolv-2.7.so
b7d4d000-b7d4f000 rw-p b7d4d000 00:00 0
b7d4f000-b7d53000 r-xp 00000000 03:01 36433      /lib/libnss_dns-2.7.so
b7d53000-b7d55000 rw-p 00003000 03:01 36433      /lib/libnss_dns-2.7.so
b7d55000-b7d5e000 r-xp 00000000 03:01 36443      /lib/libnss_files-2.7.so
b7d5e000-b7d60000 rw-p 00008000 03:01 36443      /lib/libnss_files-2.7.so
b7d66000-b7d67000 rw-p b7d66000 00:00 0
b7d67000-b7d7a000 r-xp 00000000 03:01 36424      /lib/libnsl-2.7.so
b7d7a000-b7d7c000 rw-p 00012000 03:01 36424      /lib/libnsl-2.7.so
b7d7c000-b7d7f000 rw-p b7d7c000 00:00 0
b7d7f000-b7da0000 r-xp 00000000 fd:01 102553     /mnt/usr/usr/lib/libopencdk.so.10.0.6
b7da0000-b7da1000 rw-p 00020000 fd:01 102553     /mnt/usr/usr/lib/libopencdk.so.10.0.6
b7da1000-b7db5000 r-xp 00000000 fd:01 98722      /mnt/usr/usr/lib/libz.so.1.2.3.3
b7db5000-b7db6000 rw-p 00013000 fd:01 98722      /mnt/usr/usr/lib/libz.so.1.2.3.3
b7db6000-b7ee5000 r-xp 00000000 03:01 36341      /lib/libc-2.7.so
b7ee5000-b7ee6000 r--p 0012f000 03:01 36341      /lib/libc-2.7.so
b7ee6000-b7ee8000 rw-p 00130000 03:01 36341      /lib/libc-2.7.so
b7ee8000-b7eeb000 rw-p b7ee8000 00:00 0
b7eeb000-b7eee000 r-xp 00000000 fd:01 102518     /mnt/usr/usr/lib/libgpg-error.so.0.3.0
b7eee000-b7eef000 rw-p 00002000 fd:01 102518     /mnt/usr/usr/lib/libgpg-error.so.0.3.0
b7eef000-b7f55000 r-xp 00000000 fd:01 98322      /mnt/usr/usr/lib/libgcrypt.so.11.4.4
b7f55000-b7f57000 rw-p 00066000 fd:01 98322      /mnt/usr/usr/lib/libgcrypt.so.11.4.4
b7f57000-b7f66000 r-xp 00000000 fd:01 98606      /mnt/usr/usr/lib/libtasn1.so.3.0.15
b7f66000-b7f67000 rw-p 0000e000 fd:01 98606      /mnt/usr/usr/lib/libtasn1.so.3.0.15
b7f67000-b7f68000 rw-p b7f67000 00:00 0
b7f68000-b7f72000 r-xp 00000000 fd:01 100578     /mnt/usr/usr/lib/libgnutls-extra.so.26.1.3
b7f72000-b7f73000 rw-p 0000a000 fd:01 100578     /mnt/usr/usr/lib/libgnutls-extra.so.26.1.3
b7f73000-b7fe6000 r-xp 00000000 fd:01 100580     /mnt/usr/usr/lib/libgnutls.so.26.1.3
b7fe6000-b7fec000 rw-p 00072000 fd:01 100580     /mnt/usr/usr/lib/libgnutls.so.26.1.3
b7ff2000-b7ff4000 rw-p b7ff2000 00:00 0
b7ff4000-b800e000 r-xp 00000000 03:01 36322      /lib/ld-2.7.so
b800e000-b8010000 rw-p 00019000 03:01 36322      /lib/ld-2.7.so
bf7fa000-bf80f000 rw-p bffeb000 00:00 0          [stack]
ffffe000-fffff000 r-xp 00000000 00:00 0          [vdso]
Aborted
$

An etch client simply segfaults after saying "Fatal error: Internal
error in memory allocation." and "Handshake has failed" without
further output.

Greetings
Marc

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.25-zgsrv (SMP w/1 CPU core; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gnutls-bin depends on:
ii  libc6                         2.7-10     GNU C Library: Shared libraries
ii  libgcrypt11                   1.4.1-1    LGPL Crypto library - runtime libr
ii  libgnutls26                   2.2.2-1    the GNU TLS library - runtime libr
ii  libgpg-error0                 1.4-2      library for common error values an
ii  libreadline5                  5.2-3      GNU readline and history libraries
ii  libtasn1-3                    1.4-1      Manage ASN.1 structures (runtime)

gnutls-bin recommends no packages.

-- no debconf information