[Pkg-xmpp-devel] prosody 0.9.12-2+deb9u3: attempt to call global 'secure_equals' (a nil value)

drebs drebs at riseup.net
Thu Jun 17 13:11:54 BST 2021


Hello, dear prosody package maintainers!

I'm using Debian 9 and since last update to prosody prosody
0.9.12-2+deb9u3 from http://security.debian.org/debian-security we're
getting the following error when someone tries do connect to prosody:

Jun 17 12:09:04 general warn    Attempt to read a non-existent global 'secure_equals'
stack traceback:
        ...usr/lib/prosody/modules/mod_auth_internal_hashed.lua:71: in function <...usr/lib/prosody/modules/mod_auth_internal_hashed.lua:47>
        (tail call): ?
        ...usr/lib/prosody/modules/mod_auth_internal_hashed.lua:127: in function 'plain_test'
        /usr/lib/prosody/util/sasl/plain.lua:72: in function </usr/lib/prosody/util/sasl/plain.lua:38>
        (tail call): ?
        /usr/lib/prosody/modules/mod_saslauth.lua:77: in function </usr/lib/prosody/modules/mod_saslauth.lua:66>
        (tail call): ?
        /usr/lib/prosody/util/events.lua:67: in function 'fire_event'
        /usr/lib/prosody/core/stanza_router.lua:149: in function </usr/lib/prosody/core/stanza_router.lua:56>
        (tail call): ?
        ...
        [C]: in function 'parse'
        /usr/lib/prosody/util/xmppstream.lua:255: in function 'feed'
        /usr/lib/prosody/modules/mod_c2s.lua:238: in function 'data'
        /usr/lib/prosody/modules/mod_c2s.lua:260: in function </usr/lib/prosody/modules/mod_c2s.lua:257>
        (tail call): ?
        /usr/lib/prosody/net/server_select.lua:868: in function </usr/lib/prosody/net/server_select.lua:850>
        [C]: in function 'xpcall'
        /usr/bin/prosody:376: in function 'loop'
        /usr/bin/prosody:407: in main chunk
        [C]: ?

I suspect it might be related to patches that the Debian package
introduces in upstream code, so that's why I'm reporting it to you.

Please let me know if I should open a bug in bugs.debian.org, I'm not
very experienced with it but I can try. :)

Thanks a lot!



More information about the Pkg-xmpp-devel mailing list