[Pkg-openssl-devel] Bug#758197: Bug#758197: Bug#758197: libssl-dev: libssl segfaults when called SSL_CTX_new(SSLv23_client_method()).

[Dariusz Dwornikowski]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


>>> 
>>> Dear Maintainer,
>>> 
>>> When calling SSL_CTX_new(SSLv23_client_method()), libssl
>>> crashes with stack smash detected. After some time debugging
>>> with gdb, I have pinpointed that this happens in
>>> ssleay_rand_add function in md_rand.c.
>> 
>> This is most likely an error in the program you're using.  If
>> that would crash, nothing that tries to use SSL would work.
> 
> So I'm for instance wondering if it calls 
> OpenSSL_add_all_algorithms() or not.

In fact it does not call OpenSSL_add_all_algorithms(), I added it and
still it segfaults here:
https://github.com/strophe/libstrophe/blob/master/src/tls_openssl.c#L68

Anyway I think this is an issue for libstrophe upstream anyway.



- -- 
Dariusz Dwornikowski,
  Institute of Computing Science, Poznań University of Technology
  www.cs.put.poznan.pl/ddwornikowski/
  room 2.7.2 BTiCW | tel. +48 61 665 29 41
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCAAGBQJT7i0LAAoJECEac8aaew/H504QAKpzH34B/w6n6OXJwabVCLjk
uNhqz9Rcexn4d5oMFB53H+l/3FFjbXFTrOms7G4FMvEW9hr1R2Z9QMaT0WYJFLxh
v7MdcNTiOpKj28qULFsPOGWyQqzgGbZBzbGrQ9P0vD7YTQ6++rIIA9fmljuTtzxB
LFGBSeEeUlQkJwxNGCdXKCT9NA3Tbi6siiHz3gp6X6yvzBeLREJShlOrGJ9MQY7A
epUldM+o44DUc7qTgJa34D5+oz5kAHyA40VQmvNgVQJBNw+c1JDL3Rcku5qZXrvk
QFm2NbMYuk0wNMDX7r8gu/wFAjDODYJebbf9WcsrYjsIPZCcW267jmOhZIg6Kqkw
lyk8fEJqqMJIBGYjuYiOX+YAkouZQEz+vCda2ipLrO5PYYQ+M//II56orlLcUYzB
zQQBKFlKpmBjOeiKTzbMSzg6565iXDCzmLDNwxKAkxPEUm2xBJK08PRcBGqtUlW2
0JEC+oGuKuHpJhouP+r3D1wmbYn4RKzI+eRo+qy3H5q7EQ8jmr3dDml/EAzACg1k
oRMSX7pi1jt+YEDhU6I/CZtdrNOHjlYWkV0JPTanEScAVydgRY1gRJ4SGJcAPUdh
BHXIZg8do2aZ3yrJSAyg24e4PJbCJFTzhLwMqBg8q6qXNWXT6Nna6TnhuPjeEB4R
XJgcRtf3uEFuXndAAHtQ
=neJu
-----END PGP SIGNATURE-----