[Pkg-openssl-devel] Bug#335912: libssl0.9.8: openssl upgrade causes segfault on openssh client on sparc64

[Ron Murray]

Package: libssl0.9.8
Version: 0.9.8a-2
Severity: normal

After the libssl upgrade to 0.9.8a-2 yesterday, the ssh client
segfaults. Confusingly, it doesn't do it all the time, just most of
the time. Usually, I can get it to work by repeating the command until
it works.

Here's a gdb session, with backtrace:

> $ gdb /usr/bin/ssh
> GNU gdb 6.3-debian
> Copyright 2004 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License, and
> you are
> welcome to change it and/or distribute copies of it under certain
> conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB.  Type "show warranty" for
> details.
> This GDB was configured as "sparc-linux"...(no debugging symbols
> found)
> Using host libthread_db library "/lib/libthread_db.so.1".
> 
> (gdb) set args user at host
> (gdb) r
> Starting program: /usr/bin/ssh user at host
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> (no debugging symbols found)
> 
> Program received signal SIGSEGV, Segmentation fault.
> ---Type <return> to continue, or q <return> to quit---
> 0x700ef194 in bn_sub_words () from /usr/lib/v9/libcrypto.so.0.9.8
> (gdb) bt
> #0  0x700ef194 in bn_sub_words () from /usr/lib/v9/libcrypto.so.0.9.8
> #1  0x700e8958 in bn_sub_part_words () from
> /usr/lib/v9/libcrypto.so.0.9.8
> #2  0x700e94d4 in bn_mul_recursive () from
> /usr/lib/v9/libcrypto.so.0.9.8
> #3  0x700e9384 in bn_mul_recursive () from
> /usr/lib/v9/libcrypto.so.0.9.8
> #4  0x700ea244 in BN_mul () from /usr/lib/v9/libcrypto.so.0.9.8
> #5  0x700f0770 in BN_mod_mul_montgomery () from
> /usr/lib/v9/libcrypto.so.0.9.8
> #6  0x700e6a30 in BN_mod_exp_mont_consttime ()
>    from /usr/lib/v9/libcrypto.so.0.9.8
> #7  0x7010a204 in DH_OpenSSL () from /usr/lib/v9/libcrypto.so.0.9.8
> #8  0x70109fcc in DH_generate_key () from
> /usr/lib/v9/libcrypto.so.0.9.8
> #9  0x00039b4c in error ()
> #10 0x00037078 in error ()
> #11 0x00034314 in error ()
> #12 0x00033ab4 in error ()
> #13 0x0001ee6c in ?? ()
> #14 0x0001ee6c in ?? ()
> Previous frame identical to this frame (corrupt stack?)
> (gdb) q
> The program is running.  Exit anyway? (y or n) y

I tried recompiling openssh, but got the same result.

 .....Ron

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: sparc (sparc64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.13.4-curly-0
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libssl0.9.8 depends on:
ii  debconf [debconf-2.0]         1.4.58     Debian configuration management sy
ii  libc6                         2.3.5-6    GNU C Library: Shared libraries an

libssl0.9.8 recommends no packages.

-- debconf information:
  libssl0.9.8/restart-services:

**********************************************************************
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager at postmaster at dor.state.ma.us.
**********************************************************************