[Pkg-openssl-devel] Bug#895035: osc: crashes with memory corruption when using new libssl1.1

[Kurt Roeckx]

On Fri, Apr 06, 2018 at 07:54:44PM +0100, Simon McVittie wrote:
> On Fri, 06 Apr 2018 at 19:44:18 +0200, Kurt Roeckx wrote:
> > On Fri, Apr 06, 2018 at 01:58:03PM +0100, Simon McVittie wrote:
> > > This is probably a bug in libssl1.1 or in python-m2crypto, but I'm
> > > reporting it against osc for now, because that's the only place I know
> > > how to reproduce it at the moment. X-Debbugs-Cc'd to the lower-level
> > > packages' maintainers.
> > 
> > Can you run it under valgrind?
> 
> There's a lot of Python-related noise, but yes. It looks like a
> use-after-free in m2crypto, maybe?

It at least doesn't look like an OpenSSL issue at first look.


Kurt