Bug 1125956

Summary: evolution killed by SIGSEGV
Product: Red Hat Enterprise Linux 7 Reporter: David Jaša <djasa>
Component: p11-kitAssignee: Stef Walter <stefw>
Status: CLOSED DUPLICATE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.0CC: fidencio, mcrha
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:ecbced2f2d19eb5a4aa657f58f0401cb71e3a1f0
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-08-07 07:28:05 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages
none
File: binary
none
File: sosreport.tar.xz none

Description David Jaša 2014-08-01 12:51:32 UTC
Description of problem:
evolution crashed on startup

Version-Release number of selected component:
evolution-3.8.5-22.el7_0.1.1

Additional info:
reporter:       libreport-2.1.11
backtrace_rating: 4
cmdline:        evolution
executable:     /usr/bin/evolution
kernel:         3.10.0-123.4.4.el7.x86_64
runlevel:       N 5
type:           CCpp
uid:            16189

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 ??
 #1 finalize_module_unlocked_reentrant at modules.c:666
 #2 _p11_kit_finalize_registered_unlocked_reentrant at modules.c:815
 #3 proxy_C_Finalize at proxy.c:216
 #4 SECMOD_UnloadModule at pk11load.c:555
 #5 SECMOD_SlotDestroyModule at pk11util.c:871
 #6 PK11_DestroySlot at pk11slot.c:441
 #7 PK11_FreeSlot at pk11slot.c:454
 #8 SECMOD_DestroyModule at pk11util.c:842
 #9 SECMOD_DestroyModuleListElement at pk11util.c:888

Comment 1 David Jaša 2014-08-01 12:51:34 UTC
Created attachment 923289 [details]
File: backtrace

Comment 2 David Jaša 2014-08-01 12:51:35 UTC
Created attachment 923290 [details]
File: cgroup

Comment 3 David Jaša 2014-08-01 12:51:36 UTC
Created attachment 923291 [details]
File: core_backtrace

Comment 4 David Jaša 2014-08-01 12:51:38 UTC
Created attachment 923292 [details]
File: dso_list

Comment 5 David Jaša 2014-08-01 12:51:39 UTC
Created attachment 923293 [details]
File: environ

Comment 6 David Jaša 2014-08-01 12:51:40 UTC
Created attachment 923294 [details]
File: limits

Comment 7 David Jaša 2014-08-01 12:51:42 UTC
Created attachment 923295 [details]
File: maps

Comment 8 David Jaša 2014-08-01 12:51:43 UTC
Created attachment 923296 [details]
File: open_fds

Comment 9 David Jaša 2014-08-01 12:51:45 UTC
Created attachment 923297 [details]
File: proc_pid_status

Comment 10 David Jaša 2014-08-01 12:51:46 UTC
Created attachment 923298 [details]
File: var_log_messages

Comment 11 David Jaša 2014-08-01 12:51:48 UTC
Created attachment 923299 [details]
File: binary

Comment 12 David Jaša 2014-08-01 12:52:19 UTC
Created attachment 923300 [details]
File: sosreport.tar.xz

Comment 13 David Jaša 2014-08-01 13:03:42 UTC
The bug actually seems to be in p11-kit. My p11-kit configuration is altered by addition of opencryptoki module in hope of seeing thinkpad TPM module through it:

# cat /etc/pkcs11/modules/opencryptoki.module 
module: /usr/lib64/opencryptoki/libopencryptoki.so
critical: no
You have new mail in /var/spool/mail/root
[root@cihla ~]# rpm -qa '*opencryptoki*'
opencryptoki-tpmtok-3.0-11.el7.x86_64
opencryptoki-libs-3.0-11.el7.x86_64
opencryptoki-3.0-11.el7.x86_64

(this didn't materialize, instead of it, I hit this bug).
This is what nss database and p11-kit modules looked like:



bash-4.2$ modutil -dbdir /etc/pki/nssdb -list

Listing of PKCS #11 Modules
-----------------------------------------------------------
  1. NSS Internal PKCS #11 Module
	 slots: 2 slots attached
	status: loaded

	 slot: NSS Internal Cryptographic Services
	token: NSS Generic Crypto Services

	 slot: NSS User Private Key and Certificate Services
	token: NSS Certificate DB
-----------------------------------------------------------
bash-4.2$ modutil -dbdir sql:/etc/pki/nssdb -list
p11-kit: failed to initialize module: opencryptoki: The operation failed

Listing of PKCS #11 Modules
-----------------------------------------------------------
  1. NSS Internal Crypto Services
	 slots: 3 slots attached
	status: loaded

	 slot: NSS Internal Cryptographic Services
	token: NSS Generic Crypto Services

	 slot: NSS User Private Key and Certificate Services
	token: NSS Certificate DB

	 slot: NSS Application Slot 00000004
	token: NSS system database

  2. CoolKey PKCS #11 Module
	library name: /usr/lib64/pkcs11/libcoolkeypk11.so
	 slots: There are no slots attached to this module
	status: loaded

  3. p11-kit
	library name: /usr/lib64/p11-kit-proxy.so
	 slots: 6 slots attached
	status: loaded

	 slot: /etc/pki/ca-trust/source
	token: System Trust

	 slot: /usr/share/pki/ca-trust-source
	token: Default Trust

	 slot: SSH Keys
	token: SSH Keys

	 slot: Secret Store
	token: Secret Store

	 slot: Gnome2 Key Storage
	token: Gnome2 Key Storage

	 slot: User Key Storage
	token: User Key Storage
-----------------------------------------------------------
bash-4.2$ p11-kit list-modules
p11-kit: failed to initialize module: opencryptoki: The operation failed
p11-kit-trust: /usr/lib64/pkcs11/p11-kit-trust.so
    library-description: PKCS#11 Kit Trust Module
    library-manufacturer: PKCS#11 Kit
    library-version: 0.18
    token: System Trust
        manufacturer: PKCS#11 Kit
        model: p11-kit-trust
        serial-number: 1
        hardware-version: 0.18
        flags:
               write-protected
               token-initialized
    token: Default Trust
        manufacturer: PKCS#11 Kit
        model: p11-kit-trust
        serial-number: 1
        hardware-version: 0.18
        flags:
               write-protected
               token-initialized
gnome-keyring: /usr/lib64/pkcs11/gnome-keyring-pkcs11.so
    library-description: GNOME Keyring Daemon Core
    library-manufacturer: GNOME Keyring
    library-version: 1.1
    token: SSH Keys
        manufacturer: Gnome Keyring
        model: 1.0
        serial-number: 1:SSH:HOME
        flags:
               write-protected
               user-pin-initialized
               protected-authentication-path
               token-initialized
    token: Secret Store
        manufacturer: Gnome Keyring
        model: 1.0
        serial-number: 1:SECRET:MAIN
        flags:
               login-required
               user-pin-initialized
               protected-authentication-path
               token-initialized
    token: Gnome2 Key Storage
        manufacturer: Gnome Keyring
        model: 1.0
        serial-number: 1:USER:DEFAULT
        flags:
               login-required
               user-pin-initialized
               protected-authentication-path
               token-initialized
    token: User Key Storage
        manufacturer: Gnome Keyring
        model: 1.0
        serial-number: 1:XDG:DEFAULT
        flags:
               protected-authentication-path
               token-initialized
Segmentation fault (core dumped)

Comment 14 David Jaša 2014-08-01 13:17:58 UTC
> Segmentation fault (core dumped)

bug 1125965

Comment 16 Stef Walter 2014-08-07 07:28:05 UTC

*** This bug has been marked as a duplicate of bug 1125965 ***