[Pkg-openldap-devel] Bug#428468: Bug#428468: Two bugs

[Brian May]

>>>>> "Brian" == Brian May <bam at snoopy.debian.net> writes:

    Brian> So the original problem looks very much like a bug in the
    Brian> GNU TLS libraries too me.

My guess is that the original problem isn't so much due to a bug in
any application or library, but the fact that the two versions of the
TLS libraries end up getting pulled into one application.

For example:

$ ldd /usr/bin/gq | grep -E '(ssl|crypt|tls)'
                                                 libssl.so.0.9.8 => /usr/lib/i686/cmov/libssl.so.0.9.8 (0xb7f11000)
                                                 libcrypto.so.0.9.8 => /usr/lib/i686/cmov/libcrypto.so.0.9.8 (0xb7dd6000)
                                                 libresolv.so.2 => /lib/tls/i686/cmov/libresolv.so.2 (0xb7d8e000)
                                                 libm.so.6 => /lib/tls/i686/cmov/libm.so.6 (0xb793b000)
                                                 libdl.so.2 => /lib/tls/i686/cmov/libdl.so.2 (0xb770b000)
                                                 libc.so.6 => /lib/tls/i686/cmov/libc.so.6 (0xb749c000)
                                                 libcrypt.so.1 => /lib/tls/i686/cmov/libcrypt.so.1 (0xb746e000)
                                                 libgnutls.so.13 => /usr/lib/libgnutls.so.13 (0xb73e9000)
                                                 libpthread.so.0 => /lib/tls/i686/cmov/libpthread.so.0 (0xb73d6000)
                                                 librt.so.1 => /lib/tls/i686/cmov/librt.so.1 (0xb73cd000)
                                                 libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0xb7287000)
                                                 libnsl.so.1 => /lib/tls/i686/cmov/libnsl.so.1 (0xb726d000)

apache2 links with openssl, so the same would apply to php
applications using the apache plugin.



when I recompiled openldap 2.1.30 and used the resultant ldapsearch,
it too links in both libraries, although this was not obvious until I
ran strace on the process - I think the sasl2 module was probably
pulling it in.


brian at sys11:~/tmp/debian/other/aaa/openldap2-2.1.30/debian/build/clients/tools$ ldd .libs/ldapsearch 
                                                                                linux-gate.so.1 =>  (0xb7fb6000)
                                                                                libldap.so.2 => /usr/lib/libldap.so.2 (0xb7f6c000)
                                                                                liblber.so.2 => /usr/lib/liblber.so.2 (0xb7f5f000)
                                                                                libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0xb7f49000)
                                                                                libgnutls.so.13 => /usr/lib/libgnutls.so.13 (0xb7edb000)
                                                                                libcrypt.so.1 => /lib/tls/i686/cmov/libcrypt.so.1 (0xb7ead000)
                                                                                libresolv.so.2 => /lib/tls/i686/cmov/libresolv.so.2 (0xb7e9a000)
                                                                                libdl.so.2 => /lib/tls/i686/cmov/libdl.so.2 (0xb7e96000)
                                                                                libc.so.6 => /lib/tls/i686/cmov/libc.so.6 (0xb7d61000)
                                                                                libpthread.so.0 => /lib/tls/i686/cmov/libpthread.so.0 (0xb7d4e000)
                                                                                libtasn1.so.3 => /usr/lib/libtasn1.so.3 (0xb7d3b000)
                                                                                libz.so.1 => /usr/lib/libz.so.1 (0xb7d27000)
                                                                                libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0xb7cd6000)
                                                                                libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0xb7cd1000)
                                                                                /lib/ld-linux.so.2 (0xb7fb7000)
                                                                                libnsl.so.1 => /lib/tls/i686/cmov/libnsl.so.1 (0xb7cbb000)



open("/usr/lib/libkrb5support.so.0", O_RDONLY) = 4
open("/usr/lib/sasl2/libgssapiv2.la", O_RDONLY) = 4
open("/usr/lib/sasl2/libcrammd5.la", O_RDONLY) = 4
open("/usr/lib/sasl2/libcrammd5.so.2", O_RDONLY) = 4
open("/usr/lib/sasl2/libdigestmd5.la", O_RDONLY) = 4
open("/usr/lib/sasl2/libdigestmd5.so.2", O_RDONLY) = 4
open("/home/brian/.local/lib/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 4
open("/usr/lib/i686/cmov/libcrypto.so.0.9.8", O_RDONLY) = 4



This is evil :-(
-- 
Brian May <bam at snoopy.debian.net>