Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 677073 Details for
Bug 894469
pem_mdSession_Login() accesses insufficiently allocated io->u.key.ivstring
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
File: backtrace
backtrace (text/plain), 29.56 KB, created by
ya.qmp
on 2013-01-11 20:22:44 UTC
(
hide
)
Description:
File: backtrace
Filename:
MIME Type:
Creator:
ya.qmp
Created:
2013-01-11 20:22:44 UTC
Size:
29.56 KB
patch
obsolete
>[New LWP 18281] >[Thread debugging using libthread_db enabled] >Using host libthread_db library "/lib64/libthread_db.so.1". >Core was generated by `curl --verbose -X GET --insecure --cert --key key.pem --cacert ca'. >Program terminated with signal 11, Segmentation fault. >#0 convert_iv (num=8, src=0x0) at psession.c:75 >75 conv[0] = src[(i * 2)]; > >Thread 1 (Thread 0x7f275f921800 (LWP 18281)): >#0 convert_iv (num=8, src=0x0) at psession.c:75 > i = 0 > conv = " " > c = 0x18be110 "" >#1 pem_mdSession_Login (mdSession=<optimized out>, fwSession=<optimized out>, mdToken=<optimized out>, fwToken=<optimized out>, mdInstance=<optimized out>, fwInstance=<optimized out>, userType=1, pin=0x7fff3eb22cf0, oldState=0, newState=1) at psession.c:264 > fwSlot = <optimized out> > slotID = <optimized out> > io = 0x18f8410 > iv = 0x0 > mykey = '\000' <repeats 16 times>, "\002\000\000\000\060\000\000\000\323\030\000\230\070\000\000" > output = 0x0 > cx = 0x0 > rv = <optimized out> > len = 0 > lpk = 0x0 > arena = 0x18be010 > i = <optimized out> >#2 0x00007f27588dd17c in nssCKFWSession_Login (fwSession=0x18f3400, userType=userType@entry=1, pin=0x7fff3eb22cf0) at session.c:780 > error = 0 > oldState = <optimized out> > newState = 1 >#3 0x00007f27588e2468 in NSSCKFWC_Login (fwInstance=<optimized out>, hSession=<optimized out>, userType=1, pPin=0x18f62e0 "", ulPinLen=0) at wrap.c:1824 > error = 0 > fwSession = <optimized out> > pin = {data = 0x18f62e0, size = 0} > arg = <optimized out> >#4 0x0000003898c30a9b in pk11_CheckPassword (contextSpecific=0, alreadyLocked=0, pw=0x18f62e0 "", session=9, slot=0x18cf470) at pk11auth.c:71 > len = <optimized out> > crv = <optimized out> > rv = <optimized out> > mustRetry = <optimized out> > currtime = 1357934268908152 > retry = <optimized out> >#5 PK11_DoPassword (loadCerts=<optimized out>, contextSpecific=<optimized out>, alreadyLocked=<optimized out>, wincx=<optimized out>, session=<optimized out>, slot=<optimized out>) at pk11auth.c:618 > rv = <optimized out> > password = 0x18f62e0 "" > attempt = 1 >#6 PK11_DoPassword (slot=0x18cf470, session=9, loadCerts=<optimized out>, wincx=0x17fe880, alreadyLocked=0, contextSpecific=0) at pk11auth.c:547 >No locals. >#7 0x0000003966809fb1 in nss_load_key (conn=0x17feeb0, sockindex=<optimized out>, key_file=<optimized out>) at nss.c:535 > slot = 0x18cf470 > status = <optimized out> >#8 nss_load_key (conn=conn@entry=0x17feeb0, key_file=key_file@entry=0x17fe860 "key.pem", sockindex=<optimized out>) at nss.c:512 > rv = CURLE_OK > ssl = 0x17ff088 >#9 0x0000003966841235 in cert_stuff (key_file=0x17fe860 "key.pem", cert_file=0x17fe840 "./client.pem", sockindex=<optimized out>, conn=0x17feeb0) at nss.c:580 > data = 0x17f4570 > rv = <optimized out> >#10 Curl_nss_connect (conn=conn@entry=0x17feeb0, sockindex=sockindex@entry=0) at nss.c:1347 > rv = CURLE_OK > nickname = 0x0 > err = <optimized out> > model = 0x18cd9f0 > ssl2 = <optimized out> > ssl3 = 1 > tlsv1 = 1 > ssl_no_cache = <optimized out> > ssl_cbc_random_iv = <optimized out> > data = <optimized out> > sockfd = 3 > connssl = 0x17ff088 > curlerr = CURLE_SSL_CONNECT_ERROR > cipher_to_enable = <optimized out> > sock_opt = {option = PR_SockOpt_Nonblocking, value = {ip_ttl = 1, mcast_ttl = 1, tos = 1, non_blocking = 1, reuse_addr = 1, keep_alive = 1, mcast_loopback = 1, no_delay = 1, broadcast = 1, max_segment = 1, recv_buffer_size = 1, send_buffer_size = 1, linger = {polarity = 1, linger = 0}, add_member = {mcaddr = {raw = {family = 1, data = '\000' <repeats 13 times>}, inet = {family = 1, port = 0, ip = 0, pad = "\000\000\000\000\000\000\000"}, ipv6 = {family = 1, port = 0, flowinfo = 0, ip = {_S6_un = {_S6_u8 = '\000' <repeats 15 times>, _S6_u16 = {0, 0, 0, 0, 0, 0, 0, 0}, _S6_u32 = {0, 0, 0, 0}, _S6_u64 = {0, 0}}}, scope_id = 0}, local = {family = 1, path = '\000' <repeats 103 times>}}, ifaddr = {raw = {family = 0, data = '\000' <repeats 13 times>}, inet = {family = 0, port = 0, ip = 0, pad = "\000\000\000\000\000\000\000"}, ipv6 = {family = 0, port = 0, flowinfo = 0, ip = {_S6_un = {_S6_u8 = '\000' <repeats 15 times>, _S6_u16 = {0, 0, 0, 0, 0, 0, 0, 0}, _S6_u32 = {0, 0, 0, 0}, _S6_u64 = {0, 0}}}, scope_id = 0}, local = {family = 0, path = '\000' <repeats 31 times>, "l\302\276>J\345T", '\000' <repeats 16 times>"\200, \367\177\001\000\000\000\000\030\357\177\001\000\000\000\000\215\361", '\000' <repeats 14 times>, "pE\177\001\000\000\000\000\363\252\200f9\000\000\000\002"}}}, drop_member = {mcaddr = {raw = {family = 1, data = '\000' <repeats 13 times>}, inet = {family = 1, port = 0, ip = 0, pad = "\000\000\000\000\000\000\000"}, ipv6 = {family = 1, port = 0, flowinfo = 0, ip = {_S6_un = {_S6_u8 = '\000' <repeats 15 times>, _S6_u16 = {0, 0, 0, 0, 0, 0, 0, 0}, _S6_u32 = {0, 0, 0, 0}, _S6_u64 = {0, 0}}}, scope_id = 0}, local = {family = 1, path = '\000' <repeats 103 times>}}, ifaddr = {raw = {family = 0, data = '\000' <repeats 13 times>}, inet = {family = 0, port = 0, ip = 0, pad = "\000\000\000\000\000\000\000"}, ipv6 = {family = 0, port = 0, flowinfo = 0, ip = {_S6_un = {_S6_u8 = '\000' <repeats 15 times>, _S6_u16 = {0, 0, 0, 0, 0, 0, 0, 0}, _S6_u32 = {0, 0, 0, 0}, _S6_u64 = {0, 0}}}, scope_id = 0}, local = {family = 0, path = '\000' <repeats 31 times>, "l\302\276>J\345T", '\000' <repeats 16 times>"\200, \367\177\001\000\000\000\000\030\357\177\001\000\000\000\000\215\361", '\000' <repeats 14 times>, "pE\177\001\000\000\000\000\363\252\200f9\000\000\000\002"}}}, mcast_if = {raw = {family = 1, data = '\000' <repeats 13 times>}, inet = {family = 1, port = 0, ip = 0, pad = "\000\000\000\000\000\000\000"}, ipv6 = {family = 1, port = 0, flowinfo = 0, ip = {_S6_un = {_S6_u8 = '\000' <repeats 15 times>, _S6_u16 = {0, 0, 0, 0, 0, 0, 0, 0}, _S6_u32 = {0, 0, 0, 0}, _S6_u64 = {0, 0}}}, scope_id = 0}, local = {family = 1, path = '\000' <repeats 103 times>}}}} > time_left = <optimized out> > timeout = <optimized out> >#11 0x0000003966837d1b in Curl_ssl_connect (conn=conn@entry=0x17feeb0, sockindex=sockindex@entry=0) at sslgen.c:206 > res = <optimized out> >#12 0x0000003966810275 in Curl_http_connect (conn=0x17feeb0, done=0x7fff3eb2321f) at http.c:1333 > data = 0x17f4570 > result = <optimized out> >#13 0x0000003966821d14 in Curl_protocol_connect (conn=conn@entry=0x17feeb0, protocol_done=protocol_done@entry=0x7fff3eb2321f) at url.c:3437 > result = CURLE_OK > data = <optimized out> >#14 0x0000003966821fea in Curl_setup_conn (conn=conn@entry=0x17feeb0, protocol_done=0x7fff3eb2321f) at url.c:5243 > connected = true > result = <optimized out> > data = 0x17f4570 >#15 0x0000003966836d74 in Curl_async_resolved (conn=0x17feeb0, protocol_done=protocol_done@entry=0x7fff3eb2321f) at hostasyn.c:139 > code = <optimized out> >#16 0x0000003966829881 in connect_host (conn=0x7fff3eb23220, data=0x17f4570) at transfer.c:1952 > res = CURLE_OK > async = true > protocol_done = false >#17 Curl_do_perform (data=0x17f4570) at transfer.c:2087 > res = <optimized out> > res2 = <optimized out> > conn = 0x17feeb0 > newurl = 0x0 > follow = FOLLOW_NONE >#18 0x0000003966829a5b in Curl_perform (data=data@entry=0x17f4570) at transfer.c:2233 > res = <optimized out> >#19 0x0000003966829f3c in curl_easy_perform (curl=curl@entry=0x17f4570) at easy.c:536 > data = 0x17f4570 >#20 0x0000000000409d7b in operate (config=config@entry=0x7fff3eb23620, argc=argc@entry=16, argv=argv@entry=0x7fff3eb23ab8) at tool_operate.c:1361 > retry_sleep = 1000 > this_url = 0x17fe7a0 "https://vmnoah.bfh.ch:61837/resources/energypoints" > metalink_next_res = 0 > outfile = 0x0 > retrystart = {tv_sec = 118824, tv_usec = 240417} > retry_sleep_default = <optimized out> > infd = <optimized out> > infdopen = <optimized out> > outs = {filename = 0x0, alloc_filename = false, is_cd_filename = false, s_isreg = false, fopened = false, stream = 0x38837b2280 <_IO_2_1_stdout_>, config = 0x7fff3eb23620, bytes = 0, init = 0} > input = {fd = 0, config = 0x7fff3eb23620} > uploadfilesize = <optimized out> > retry_numretries = 0 > uploadfile = 0x0 > separator = 0 > urls = 0x17fe570 > urlnum = 1 > infilenum = 1 > mlres = 0x0 > up = <optimized out> > infiles = 0x0 > outfiles = 0x0 > inglob = 0x0 > metalink = 0 > mlfile = 0x0 > errorbuffer = '\000' <repeats 16 times>"\310, \024\223_'\177\000\000\220\311\222_'\177\000\000\220\031\223_'\177", '\000' <repeats 11 times>"\300, \222_'\177\000\000\310\304\222_'\177\000\000\310\024\223_'\177\000\000\220\311\222_'\177\000\000\000\260\222_'\177\000\000\220\031\223_'\177\000\000\000\000\000\000\000\000\000\000\320\067\262>\377\177\000\000\260\314\000\203\070\000\000\000\304\226\000\203\070\000\000\000\220 \"\203\070\000\000\000\000\312\033\260\000\000\000\000\000\067\262>\377\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\303\235\000\203\070\000\000\000\000\000\300pd}\376\377\340\066\262>\377\177\000\000(o\300\002\000\000\000\000`\361\277>\377\177\000\000]2B\000\000\000\000\000\000\000 jd}\376\377\000\000P\333\001\006q\000`\361\277>\377\177\000\000\000\000\000\000\000\000\000\000\300\361\277>\377\177\000" > progressbar = {calls = 0, prev = 0, width = 79, out = 0x38837b21a0 <_IO_2_1_stderr_>, initial_size = 0} > urlnode = 0x17fe460 > hdrcbdata = {outs = 0x7fff3eb23400, heads = 0x7fff3eb233d0, honor_cd_filename = false} > heads = {filename = 0x0, alloc_filename = false, is_cd_filename = false, s_isreg = false, fopened = false, stream = 0x38837b2280 <_IO_2_1_stdout_>, config = 0x7fff3eb23620, bytes = 0, init = 0} > mlfile_last = 0x0 > curl = 0x17f4570 > httpgetfields = 0x0 > stillflags = <optimized out> > res = <optimized out> > i = <optimized out> > orig_noprogress = false > orig_isatty = false >#21 0x000000000040225b in main (argc=16, argv=0x7fff3eb23ab8) at tool_main.c:90 > res = <optimized out> > config = {easy = 0x17f4570, remote_time = false, random_file = 0x0, egd_file = 0x0, useragent = 0x17fe4d0 "curl/7.27.0", cookie = 0x0, cookiejar = 0x0, cookiefile = 0x0, cookiesession = false, encoding = false, tr_encoding = false, authtype = 0, use_resume = false, resume_from_current = false, disable_epsv = false, disable_eprt = false, ftp_pret = false, proto = -1, proto_present = false, proto_redir = -1041, proto_redir_present = false, resume_from = 0, postfields = 0x0, postfieldsize = -1, referer = 0x0, timeout = 0, connecttimeout = 0, maxredirs = 50, max_filesize = 0, headerfile = 0x0, ftpport = 0x0, iface = 0x0, localport = 0, localportrange = 0, porttouse = 0, range = 0x0, low_speed_limit = 0, low_speed_time = 0, showerror = -1, userpwd = 0x0, tls_username = 0x0, tls_password = 0x0, tls_authtype = 0x0, proxyuserpwd = 0x0, proxy = 0x0, proxyver = 0, noproxy = 0x0, mail_from = 0x0, mail_rcpt = 0x0, mail_auth = 0x0, proxytunnel = false, ftp_append = false, mute = false, use_ascii = false, autoreferer = false, failonerror = false, include_headers = false, no_body = false, dirlistonly = false, followlocation = false, unrestricted_auth = false, netrc_opt = false, netrc = false, netrc_file = 0x0, noprogress = true, isatty = true, url_list = 0x17fe460, url_last = 0x17fe460, url_get = 0x0, url_out = 0x0, cipher_list = 0x0, cert = 0x17fe330 "./client.pem", cert_type = 0x0, cacert = 0x17fe370 "ca.pem", capath = 0x0, crlfile = 0x0, key = 0x17fe350 "key.pem", key_type = 0x0, key_passwd = 0x17fe310 "", pubkey = 0x0, hostpubmd5 = 0x0, engine = 0x0, list_engines = false, crlf = false, customrequest = 0x17fe2f0 "GET", krblevel = 0x0, trace_dump = 0x17fe2d0 "%", trace_stream = 0x38837b21a0 <_IO_2_1_stderr_>, trace_fopened = false, tracetype = TRACE_PLAIN, tracetime = false, httpversion = 0, progressmode = 0, nobuffer = false, readbusy = false, globoff = false, use_httpget = false, insecure_ok = true, create_dirs = false, ftp_create_dirs = false, ftp_skip_ip = false, proxynegotiate = false, proxyntlm = false, proxydigest = false, proxybasic = false, proxyanyauth = false, writeout = 0x0, writeenv = false, errors = 0x38837b21a0 <_IO_2_1_stderr_>, errors_fopened = false, quote = 0x0, postquote = 0x0, prequote = 0x0, ssl_version = 0, ip_version = 0, timecond = CURL_TIMECOND_NONE, condtime = 0, headers = 0x17fe390, httppost = 0x0, last_post = 0x0, telnet_options = 0x0, resolve = 0x0, httpreq = HTTPREQ_UNSPEC, sendpersecond = 0, recvpersecond = 0, ftp_ssl = false, ftp_ssl_reqd = false, ftp_ssl_control = false, ftp_ssl_ccc = false, ftp_ssl_ccc_mode = 0, socksproxy = 0x0, socksver = 0, socks5_gssapi_service = 0x0, socks5_gssapi_nec = 0, tcp_nodelay = false, req_retry = 0, retry_delay = 0, retry_maxtime = 0, ftp_account = 0x0, ftp_alternative_to_user = 0x0, ftp_filemethod = 0, tftp_blksize = 0, ignorecl = false, disable_sessionid = false, libcurl = 0x0, raw = false, post301 = false, post302 = false, post303 = false, nokeepalive = false, alivetime = 0, content_disposition = false, default_node_flags = 0, xattr = false, gssapi_delegation = 0, ssl_allow_beast = false, use_metalink = false, metalinkfile_list = 0x0, metalinkfile_last = 0x0} >From To Syms Read Shared Object Library >0x0000003966809ad0 0x000000396684e264 Yes /lib64/libcurl.so.4 >0x00000038848022a0 0x000000388480557c Yes /lib64/librt.so.1 >0x0000003884402190 0x000000388440e640 Yes /lib64/libz.so.1 >0x0000003884005790 0x00000038840104b4 Yes /lib64/libpthread.so.0 >0x000000388341f1a0 0x0000003883560940 Yes /lib64/libc.so.6 >0x0000003966403010 0x0000003966407528 Yes /lib64/libidn.so.11 >0x000000389ec036d0 0x000000389ec0ab24 Yes /lib64/liblber-2.4.so.2 >0x000000389e80f090 0x000000389e83d998 Yes /lib64/libldap-2.4.so.2 >0x000000388d40ad90 0x000000388d438264 Yes /lib64/libgssapi_krb5.so.2 >0x000000388d01b690 0x000000388d093410 Yes /lib64/libkrb5.so.3 >0x000000388cc044d0 0x000000388cc1c938 Yes /lib64/libk5crypto.so.3 >0x000000388c001560 0x000000388c002144 Yes /lib64/libcom_err.so.2 >0x000000389940a140 0x000000389942b6d8 Yes /lib64/libssl3.so >0x0000003899c09d40 0x0000003899c22400 Yes /lib64/libsmime3.so >0x0000003898c19100 0x0000003898cfbb24 Yes /lib64/libnss3.so >0x000000389880bbd0 0x0000003898819a38 Yes /lib64/libnssutil3.so >0x0000003898000ff0 0x0000003898001f18 Yes /lib64/libplds4.so >0x0000003898401510 0x0000003898402bf4 Yes /lib64/libplc4.so >0x0000003897c0d280 0x0000003897c2cc10 Yes /lib64/libnspr4.so >0x0000003883c00ed0 0x0000003883c019f0 Yes /lib64/libdl.so.2 >0x00000038a0405500 0x00000038a041ee78 Yes /lib64/libssh2.so.1 >0x0000003883000b20 0x000000388301a3d9 Yes /lib64/ld-linux-x86-64.so.2 >0x0000003886003a30 0x000000388601200c Yes /lib64/libresolv.so.2 >0x000000389cc04ba0 0x000000389cc15d34 Yes (*) /lib64/libsasl2.so.2 >0x000000388c802b50 0x000000388c8080cc Yes /lib64/libkrb5support.so.0 >0x000000388c401190 0x000000388c401b44 Yes /lib64/libkeyutils.so.1 >0x0000003884c02a40 0x0000003884c12168 Yes /lib64/libgcc_s.so.1 >0x0000003890216f30 0x000000389024d074 Yes /lib64/libssl.so.10 >0x000000388bc61fc0 0x000000388bd44af8 Yes /lib64/libcrypto.so.10 >0x0000003897400ed0 0x000000389740610c Yes /lib64/libcrypt.so.1 >0x0000003885806170 0x00000038858175d4 Yes /lib64/libselinux.so.1 >0x0000003897803660 0x0000003897847570 Yes /lib64/libfreebl3.so >0x0000003885401db0 0x00000038854452e8 Yes /lib64/libpcre.so.1 >0x00000038868021e0 0x000000388680967c Yes /lib64/libnss_files.so.2 >0x0000003886401100 0x00000038864048b4 Yes /lib64/libnss_dns.so.2 >0x00000038838048e0 0x000000388383015c Yes /lib64/libsoftokn3.so >0x000000389d40a4e0 0x000000389d48a560 Yes /lib64/libsqlite3.so.0 >0x00007f2758af9c50 0x00007f2758afa2c0 Yes /lib64/libnsssysinit.so >0x00007f27588d5aa0 0x00007f27588ee4e8 Yes /lib64/libnsspem.so >(*): Shared library is missing debugging information. >$1 = 0x0 >No symbol "__glib_assert_msg" in current context. >rax 0x18be110 25944336 >rbx 0x7fff3eb22cf0 140734245252336 >rcx 0x7fff3eb22b80 140734245251968 >rdx 0x18be110 25944336 >rsi 0x38837b1740 242724050752 >rdi 0x38837b1740 242724050752 >rbp 0x18be110 0x18be110 >rsp 0x7fff3eb22bf0 0x7fff3eb22bf0 >r8 0x0 0 >r9 0x2 2 >r10 0x9 9 >r11 0x388348904a 242720739402 >r12 0x0 0 >r13 0x0 0 >r14 0x18f8410 26182672 >r15 0x0 0 >rip 0x7f27588da180 0x7f27588da180 <pem_mdSession_Login+240> >eflags 0x10246 [ PF ZF IF RF ] >cs 0x33 51 >ss 0x2b 43 >ds 0x0 0 >es 0x0 0 >fs 0x0 0 >gs 0x0 0 >Dump of assembler code for function pem_mdSession_Login: > 0x00007f27588da090 <+0>: push %r15 > 0x00007f27588da092 <+2>: mov %rcx,%rdi > 0x00007f27588da095 <+5>: push %r14 > 0x00007f27588da097 <+7>: push %r13 > 0x00007f27588da099 <+9>: push %r12 > 0x00007f27588da09b <+11>: mov $0x2,%r12d > 0x00007f27588da0a1 <+17>: push %rbp > 0x00007f27588da0a2 <+18>: push %rbx > 0x00007f27588da0a3 <+19>: sub $0x78,%rsp > 0x00007f27588da0a7 <+23>: mov %fs:0x28,%rax > 0x00007f27588da0b0 <+32>: mov %rax,0x68(%rsp) > 0x00007f27588da0b5 <+37>: xor %eax,%eax > 0x00007f27588da0b7 <+39>: mov 0xb8(%rsp),%rbx > 0x00007f27588da0bf <+47>: movl $0x0,0x18(%rsp) > 0x00007f27588da0c7 <+55>: callq 0x7f27588e0970 <NSSCKFWToken_GetFWSlot> > 0x00007f27588da0cc <+60>: mov %rax,%rdi > 0x00007f27588da0cf <+63>: callq 0x7f27588df270 <nssCKFWSlot_GetSlotID> > 0x00007f27588da0d4 <+68>: mov $0x800,%edi > 0x00007f27588da0d9 <+73>: mov %rax,%rbp > 0x00007f27588da0dc <+76>: callq 0x7f27588d57a0 <PORT_NewArena_Util@plt> > 0x00007f27588da0e1 <+81>: test %rax,%rax > 0x00007f27588da0e4 <+84>: mov %rax,0x8(%rsp) > 0x00007f27588da0e9 <+89>: je 0x7f27588da3c4 <pem_mdSession_Login+820> > 0x00007f27588da0ef <+95>: mov (%rbx),%rsi > 0x00007f27588da0f2 <+98>: lea 0x14fda(%rip),%rdi # 0x7f27588ef0d3 > 0x00007f27588da0f9 <+105>: xor %eax,%eax > 0x00007f27588da0fb <+107>: callq 0x7f27588db2c0 <plog> > 0x00007f27588da100 <+112>: mov 0x21deb9(%rip),%rax # 0x7f2758af7fc0 > 0x00007f27588da107 <+119>: movl $0x0,-0x4(%rax,%rbp,4) > 0x00007f27588da10f <+127>: mov 0x21ddfa(%rip),%rax # 0x7f2758af7f10 > 0x00007f27588da116 <+134>: mov (%rax),%ecx > 0x00007f27588da118 <+136>: test %ecx,%ecx > 0x00007f27588da11a <+138>: jle 0x7f27588da3a8 <pem_mdSession_Login+792> > 0x00007f27588da120 <+144>: mov 0x21de09(%rip),%rax # 0x7f2758af7f30 > 0x00007f27588da127 <+151>: xor %edx,%edx > 0x00007f27588da129 <+153>: mov (%rax),%rsi > 0x00007f27588da12c <+156>: jmp 0x7f27588da13c <pem_mdSession_Login+172> > 0x00007f27588da12e <+158>: xchg %ax,%ax > 0x00007f27588da130 <+160>: add $0x1,%rdx > 0x00007f27588da134 <+164>: cmp %edx,%ecx > 0x00007f27588da136 <+166>: jle 0x7f27588da3a8 <pem_mdSession_Login+792> > 0x00007f27588da13c <+172>: mov (%rsi,%rdx,8),%r14 > 0x00007f27588da140 <+176>: test %r14,%r14 > 0x00007f27588da143 <+179>: je 0x7f27588da130 <pem_mdSession_Login+160> > 0x00007f27588da145 <+181>: cmp 0x2c0(%r14),%rbp > 0x00007f27588da14c <+188>: jne 0x7f27588da130 <pem_mdSession_Login+160> > 0x00007f27588da14e <+190>: cmpl $0x2,(%r14) > 0x00007f27588da152 <+194>: jne 0x7f27588da130 <pem_mdSession_Login+160> > 0x00007f27588da154 <+196>: mov $0x9,%edi > 0x00007f27588da159 <+201>: mov 0xb0(%r14),%r13 > 0x00007f27588da160 <+208>: callq 0x7f27588d5900 <malloc@plt> > 0x00007f27588da165 <+213>: test %rax,%rax > 0x00007f27588da168 <+216>: mov %rax,%rbp > 0x00007f27588da16b <+219>: je 0x7f27588da1b4 <pem_mdSession_Login+292> > 0x00007f27588da16d <+221>: movb $0x0,0x12(%rsp) > 0x00007f27588da172 <+226>: xor %r12d,%r12d > 0x00007f27588da175 <+229>: movq $0x0,0x0(%rbp) > 0x00007f27588da17d <+237>: nopl (%rax) >=> 0x00007f27588da180 <+240>: movzbl 0x0(%r13,%r12,2),%eax > 0x00007f27588da186 <+246>: lea 0x10(%rsp),%rdi > 0x00007f27588da18b <+251>: xor %esi,%esi > 0x00007f27588da18d <+253>: mov $0x10,%edx > 0x00007f27588da192 <+258>: mov %al,0x10(%rsp) > 0x00007f27588da196 <+262>: movzbl 0x1(%r13,%r12,2),%eax > 0x00007f27588da19c <+268>: mov %al,0x11(%rsp) > 0x00007f27588da1a0 <+272>: callq 0x7f27588d58a0 <strtol@plt> > 0x00007f27588da1a5 <+277>: mov %al,0x0(%rbp,%r12,1) > 0x00007f27588da1aa <+282>: add $0x1,%r12 > 0x00007f27588da1ae <+286>: cmp $0x8,%r12 > 0x00007f27588da1b2 <+290>: jne 0x7f27588da180 <pem_mdSession_Login+240> > 0x00007f27588da1b4 <+292>: mov 0x8(%rbx),%r13d > 0x00007f27588da1b8 <+296>: mov (%rbx),%rbx > 0x00007f27588da1bb <+299>: lea 0x40(%rsp),%r15 > 0x00007f27588da1c0 <+304>: mov $0x18,%r12d > 0x00007f27588da1c6 <+310>: mov %rbx,(%rsp) > 0x00007f27588da1ca <+314>: callq 0x7f27588eab60 <MD5_NewContext> > 0x00007f27588da1cf <+319>: mov %rax,%rdi > 0x00007f27588da1d2 <+322>: mov %rax,%rbx > 0x00007f27588da1d5 <+325>: callq 0x7f27588eac10 <MD5_Begin> > 0x00007f27588da1da <+330>: nopw 0x0(%rax,%rax,1) > 0x00007f27588da1e0 <+336>: mov (%rsp),%rsi > 0x00007f27588da1e4 <+340>: mov %r13d,%edx > 0x00007f27588da1e7 <+343>: mov %rbx,%rdi > 0x00007f27588da1ea <+346>: callq 0x7f27588eac60 <MD5_Update> > 0x00007f27588da1ef <+351>: mov $0x8,%edx > 0x00007f27588da1f4 <+356>: mov %rbp,%rsi > 0x00007f27588da1f7 <+359>: mov %rbx,%rdi > 0x00007f27588da1fa <+362>: callq 0x7f27588eac60 <MD5_Update> > 0x00007f27588da1ff <+367>: lea 0x1c(%rsp),%rdx > 0x00007f27588da204 <+372>: lea 0x20(%rsp),%rsi > 0x00007f27588da209 <+377>: mov $0x19,%ecx > 0x00007f27588da20e <+382>: mov %rbx,%rdi > 0x00007f27588da211 <+385>: callq 0x7f27588eacc0 <MD5_End> > 0x00007f27588da216 <+390>: lea -0x1(%r12),%eax > 0x00007f27588da21b <+395>: mov %r12d,%edx > 0x00007f27588da21e <+398>: xor %ecx,%ecx > 0x00007f27588da220 <+400>: lea 0x1(%r15,%rax,1),%rsi > 0x00007f27588da225 <+405>: nopl (%rax) > 0x00007f27588da228 <+408>: mov %edx,%r12d > 0x00007f27588da22b <+411>: sub %ecx,%r12d > 0x00007f27588da22e <+414>: cmp 0x1c(%rsp),%ecx > 0x00007f27588da232 <+418>: je 0x7f27588da3f0 <pem_mdSession_Login+864> > 0x00007f27588da238 <+424>: movzbl 0x20(%rsp,%rcx,1),%eax > 0x00007f27588da23d <+429>: add $0x1,%rcx > 0x00007f27588da241 <+433>: mov %al,(%r15) > 0x00007f27588da244 <+436>: add $0x1,%r15 > 0x00007f27588da248 <+440>: cmp %rsi,%r15 > 0x00007f27588da24b <+443>: jne 0x7f27588da228 <pem_mdSession_Login+408> > 0x00007f27588da24d <+445>: mov %rbx,%rdi > 0x00007f27588da250 <+448>: mov $0x1,%esi > 0x00007f27588da255 <+453>: callq 0x7f27588eabb0 <MD5_DestroyContext> > 0x00007f27588da25a <+458>: mov 0xa0(%r14),%rax > 0x00007f27588da261 <+465>: xor %edi,%edi > 0x00007f27588da263 <+467>: mov 0x10(%rax),%esi > 0x00007f27588da266 <+470>: add $0x1,%esi > 0x00007f27588da269 <+473>: callq 0x7f27588e85a0 <nss_ZAlloc> > 0x00007f27588da26e <+478>: test %rax,%rax > 0x00007f27588da271 <+481>: mov %rax,%rbx > 0x00007f27588da274 <+484>: je 0x7f27588da417 <pem_mdSession_Login+903> > 0x00007f27588da27a <+490>: mov 0xb8(%r14),%edx > 0x00007f27588da281 <+497>: lea 0x40(%rsp),%rdi > 0x00007f27588da286 <+502>: xor %ecx,%ecx > 0x00007f27588da288 <+504>: mov %rbp,%rsi > 0x00007f27588da28b <+507>: callq 0x7f27588ea520 <DES_CreateContext> > 0x00007f27588da290 <+512>: test %rax,%rax > 0x00007f27588da293 <+515>: mov %rax,%r12 > 0x00007f27588da296 <+518>: je 0x7f27588da417 <pem_mdSession_Login+903> > 0x00007f27588da29c <+524>: mov 0xa0(%r14),%rax > 0x00007f27588da2a3 <+531>: lea 0x18(%rsp),%rdx > 0x00007f27588da2a8 <+536>: mov %rbx,%rsi > 0x00007f27588da2ab <+539>: mov %r12,%rdi > 0x00007f27588da2ae <+542>: mov 0x10(%rax),%ecx > 0x00007f27588da2b1 <+545>: mov 0x8(%rax),%r8 > 0x00007f27588da2b5 <+549>: mov %ecx,%r9d > 0x00007f27588da2b8 <+552>: callq 0x7f27588ea670 <DES_Decrypt> > 0x00007f27588da2bd <+557>: mov $0x1,%esi > 0x00007f27588da2c2 <+562>: mov %r12,%rdi > 0x00007f27588da2c5 <+565>: mov %eax,%r13d > 0x00007f27588da2c8 <+568>: callq 0x7f27588ea590 <DES_DestroyContext> > 0x00007f27588da2cd <+573>: test %rbp,%rbp > 0x00007f27588da2d0 <+576>: je 0x7f27588da2da <pem_mdSession_Login+586> > 0x00007f27588da2d2 <+578>: mov %rbp,%rdi > 0x00007f27588da2d5 <+581>: callq 0x7f27588d5680 <free@plt> > 0x00007f27588da2da <+586>: test %r13d,%r13d > 0x00007f27588da2dd <+589>: mov $0xa0,%r12d > 0x00007f27588da2e3 <+595>: jne 0x7f27588da3b0 <pem_mdSession_Login+800> > 0x00007f27588da2e9 <+601>: xor %edi,%edi > 0x00007f27588da2eb <+603>: mov $0x150,%esi > 0x00007f27588da2f0 <+608>: callq 0x7f27588e85a0 <nss_ZAlloc> > 0x00007f27588da2f5 <+613>: test %rax,%rax > 0x00007f27588da2f8 <+616>: mov %rax,%rbp > 0x00007f27588da2fb <+619>: je 0x7f27588da438 <pem_mdSession_Login+936> > 0x00007f27588da301 <+625>: mov 0x8(%rsp),%rax > 0x00007f27588da306 <+630>: mov %rbp,%rdi > 0x00007f27588da309 <+633>: movl $0x1,0x8(%rbp) > 0x00007f27588da310 <+640>: mov %rax,0x0(%rbp) > 0x00007f27588da314 <+644>: callq 0x7f27588d9890 <prepare_low_rsa_priv_key_for_asn1> > 0x00007f27588da319 <+649>: mov 0xa0(%r14),%rax > 0x00007f27588da320 <+656>: mov 0x8(%rax),%rdi > 0x00007f27588da324 <+660>: callq 0x7f27588e8650 <nss_ZFreeIf> > 0x00007f27588da329 <+665>: mov 0x18(%rsp),%eax > 0x00007f27588da32d <+669>: mov 0xa0(%r14),%rdx > 0x00007f27588da334 <+676>: xor %edi,%edi > 0x00007f27588da336 <+678>: lea -0x1(%rax),%ecx > 0x00007f27588da339 <+681>: movzbl (%rbx,%rcx,1),%ecx > 0x00007f27588da33d <+685>: sub %ecx,%eax > 0x00007f27588da33f <+687>: mov %eax,0x10(%rdx) > 0x00007f27588da342 <+690>: mov 0xa0(%r14),%r12 > 0x00007f27588da349 <+697>: mov 0x10(%r12),%esi > 0x00007f27588da34e <+702>: callq 0x7f27588e85a0 <nss_ZAlloc> > 0x00007f27588da353 <+707>: mov %rax,0x8(%r12) > 0x00007f27588da358 <+712>: mov 0x18(%rsp),%eax > 0x00007f27588da35c <+716>: mov %rbx,%rsi > 0x00007f27588da35f <+719>: mov 0xa0(%r14),%rdx > 0x00007f27588da366 <+726>: mov 0x8(%rdx),%rdi > 0x00007f27588da36a <+730>: lea -0x1(%rax),%edx > 0x00007f27588da36d <+733>: movzbl (%rbx,%rdx,1),%edx > 0x00007f27588da371 <+737>: sub %edx,%eax > 0x00007f27588da373 <+739>: mov %rax,%rdx > 0x00007f27588da376 <+742>: callq 0x7f27588d58c0 <memcpy@plt> > 0x00007f27588da37b <+747>: mov 0x8(%rsp),%rdi > 0x00007f27588da380 <+752>: mov 0xa0(%r14),%rcx > 0x00007f27588da387 <+759>: mov %rbp,%rsi > 0x00007f27588da38a <+762>: mov 0x21db37(%rip),%rdx # 0x7f2758af7ec8 > 0x00007f27588da391 <+769>: callq 0x7f27588d5a20 <SEC_QuickDERDecodeItem_Util@plt> > 0x00007f27588da396 <+774>: mov %rbp,%rdi > 0x00007f27588da399 <+777>: movslq %eax,%r12 > 0x00007f27588da39c <+780>: callq 0x7f27588d9be0 <pem_DestroyPrivateKey> > 0x00007f27588da3a1 <+785>: jmp 0x7f27588da3bc <pem_mdSession_Login+812> > 0x00007f27588da3a3 <+787>: nopl 0x0(%rax,%rax,1) > 0x00007f27588da3a8 <+792>: mov $0x3,%r12d > 0x00007f27588da3ae <+798>: xor %ebx,%ebx > 0x00007f27588da3b0 <+800>: mov 0x8(%rsp),%rdi > 0x00007f27588da3b5 <+805>: xor %esi,%esi > 0x00007f27588da3b7 <+807>: callq 0x7f27588d5740 <PORT_FreeArena_Util@plt> > 0x00007f27588da3bc <+812>: mov %rbx,%rdi > 0x00007f27588da3bf <+815>: callq 0x7f27588e8650 <nss_ZFreeIf> > 0x00007f27588da3c4 <+820>: mov 0x68(%rsp),%rdx > 0x00007f27588da3c9 <+825>: xor %fs:0x28,%rdx > 0x00007f27588da3d2 <+834>: mov %r12,%rax > 0x00007f27588da3d5 <+837>: jne 0x7f27588da443 <pem_mdSession_Login+947> > 0x00007f27588da3d7 <+839>: add $0x78,%rsp > 0x00007f27588da3db <+843>: pop %rbx > 0x00007f27588da3dc <+844>: pop %rbp > 0x00007f27588da3dd <+845>: pop %r12 > 0x00007f27588da3df <+847>: pop %r13 > 0x00007f27588da3e1 <+849>: pop %r14 > 0x00007f27588da3e3 <+851>: pop %r15 > 0x00007f27588da3e5 <+853>: retq > 0x00007f27588da3e6 <+854>: nopw %cs:0x0(%rax,%rax,1) > 0x00007f27588da3f0 <+864>: test %r12d,%r12d > 0x00007f27588da3f3 <+867>: jle 0x7f27588da24d <pem_mdSession_Login+445> > 0x00007f27588da3f9 <+873>: mov %rbx,%rdi > 0x00007f27588da3fc <+876>: callq 0x7f27588eac10 <MD5_Begin> > 0x00007f27588da401 <+881>: mov 0x1c(%rsp),%edx > 0x00007f27588da405 <+885>: lea 0x20(%rsp),%rsi > 0x00007f27588da40a <+890>: mov %rbx,%rdi > 0x00007f27588da40d <+893>: callq 0x7f27588eac60 <MD5_Update> > 0x00007f27588da412 <+898>: jmpq 0x7f27588da1e0 <pem_mdSession_Login+336> > 0x00007f27588da417 <+903>: mov 0x8(%rsp),%rdi > 0x00007f27588da41c <+908>: xor %esi,%esi > 0x00007f27588da41e <+910>: callq 0x7f27588d5740 <PORT_FreeArena_Util@plt> > 0x00007f27588da423 <+915>: test %rbp,%rbp > 0x00007f27588da426 <+918>: je 0x7f27588da430 <pem_mdSession_Login+928> > 0x00007f27588da428 <+920>: mov %rbp,%rdi > 0x00007f27588da42b <+923>: callq 0x7f27588d5680 <free@plt> > 0x00007f27588da430 <+928>: mov $0x2,%r12d > 0x00007f27588da436 <+934>: jmp 0x7f27588da3bc <pem_mdSession_Login+812> > 0x00007f27588da438 <+936>: mov $0x2,%r12d > 0x00007f27588da43e <+942>: jmpq 0x7f27588da3b0 <pem_mdSession_Login+800> > 0x00007f27588da443 <+947>: callq 0x7f27588d5770 <__stack_chk_fail@plt> >End of assembler dump.
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=677073">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 894469
: 677073 |
677074
|
677075
|
677076
|
677077
|
677078
|
677079
|
677080
|
677081
|
677082