[Pkg-utopia-maintainers] Bug#647747: network-manager-openvpn-gnome: segfaults when using a private key with a password

[Rodolfo Gouveia]

Package: network-manager-openvpn-gnome
Version: 0.9.0-3
Severity: grave
Justification: renders package unusable

Dear Maintainer,
When configuring a new openvpn connection (certificates tls) with
a private key with a password, the nm-connection-editor exits.
Just selecting the key and not even configuring all the rest is enough.
This doesn't happen if the private key has no password.
All tests were done using -testing and I can reproduce this on other
machines as well.

Running under a terminal I can see a segfault:
 nm-connection-e[19773]: segfault at 8 ip b6fd1666 sp bfcacdf4 error 4 in libc-2.13.so[b6f58000+153000]
And here is a backtrace:

#0  __strlen_sse2_bsf () at ../sysdeps/i386/i686/multiarch/strlen-sse2-bsf.S:52
#1  0xb68f840f in decrypt_data (schema=<optimized out>, pkcs8_asn=<optimized out>, root=0xb69259e1 "encryptedData", password=0x0, 
    kdf_params=0xbfcacf18, enc_params=0xbfcacf44, decrypted_data=0xbfcaceb8) at privkey_pkcs8.c:1628
#2  0xb68fa376 in decode_pkcs8_key (pkey=0x9c69cb8, password=0x0, raw_key=0xbfcaceb0) at privkey_pkcs8.c:912
#3  gnutls_x509_privkey_import_pkcs8 (key=0x9c69cb8, data=0xbfcacfa4, format=GNUTLS_X509_FMT_DER, password=0x0, flags=<optimized out>)
    at privkey_pkcs8.c:1221
#4  0xb729f8bb in ?? () from /usr/lib/libnm-util.so.2
#5  0xb72798e4 in ?? () from /usr/lib/libnm-util.so.2
#6  0xb7279a4d in ?? () from /usr/lib/libnm-util.so.2
#7  0xb72847e0 in nm_setting_802_1x_set_private_key () from /usr/lib/libnm-util.so.2
#8  0xb218f88b in is_pkcs12 () from /usr/lib/NetworkManager/libnm-openvpn-properties.so
#9  0xb218763b in ?? () from /usr/lib/NetworkManager/libnm-openvpn-properties.so
#10 0xb71b9d6c in g_cclosure_marshal_VOID__VOID () from /usr/lib/libgobject-2.0.so.0
#11 0xb719d9f2 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#12 0xb71b0988 in ?? () from /usr/lib/libgobject-2.0.so.0
#13 0xb71b93f6 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#14 0xb71b96fd in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#15 0xb747890c in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#16 0xb71ba068 in g_cclosure_marshal_VOID(int0_t) () from /usr/lib/libgobject-2.0.so.0
#17 0xb719d9f2 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#18 0xb71b0988 in ?? () from /usr/lib/libgobject-2.0.so.0
#19 0xb71b93f6 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#20 0xb71b95a2 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#21 0xb7458352 in gtk_dialog_response () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#22 0xb71b9d6c in g_cclosure_marshal_VOID__VOID () from /usr/lib/libgobject-2.0.so.0
#23 0xb719d9f2 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#24 0xb71b0988 in ?? () from /usr/lib/libgobject-2.0.so.0
#25 0xb71b93f6 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#26 0xb71b95a2 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#27 0xb74235ea in gtk_button_clicked () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#28 0xb7424885 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#29 0xb74248d1 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#30 0xb7308518 in ?? () from /usr/lib/i386-linux-gnu/libgdk-x11-2.0.so.0
#31 0xb70f6b8c in ?? () from /lib/libglib-2.0.so.0
#32 0xb70f5252 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#33 0xb70f5a30 in ?? () from /lib/libglib-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#34 0xb70f60f3 in g_main_loop_run () from /lib/libglib-2.0.so.0
#35 0x08057a1b in main ()


The key and core can be found:
 http://cosmico.net/tmp/client.key
 http://cosmico.net/tmp/nm-connection-editor.core.gz
 

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.0.0-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages network-manager-openvpn-gnome depends on:
ii  libatk1.0-0              2.2.0-2   
ii  libc6                    2.13-21   
ii  libcairo-gobject2        1.10.2-6.1
ii  libcairo2                1.10.2-6.1
ii  libdbus-1-3              1.4.16-1  
ii  libdbus-glib-1-2         0.98-1    
ii  libfontconfig1           2.8.0-3   
ii  libfreetype6             2.4.7-2   
ii  libgdk-pixbuf2.0-0       2.24.0-1  
ii  libglib2.0-0             2.28.6-1  
ii  libgnome-keyring0        3.2.0-3   
ii  libgtk-3-0               3.0.12-2  
ii  libnm-glib-vpn1          0.9.0-2   
ii  libnm-glib4              0.9.0-2   
ii  libnm-util2              0.9.0-2   
ii  libpango1.0-0            1.29.4-1  
ii  network-manager-openvpn  0.9.0-3   

network-manager-openvpn-gnome recommends no packages.

network-manager-openvpn-gnome suggests no packages.

-- no debconf information