Bug 1139349

Summary: 389-ds-base server reported crash in stan_GetCERTCertificate (pki3hack.c) under the replication replay failure condition
Product: Red Hat Enterprise Linux 7 Reporter: Jan Kurik <jkurik>
Component: nssAssignee: Elio Maldonado Batiz <emaldona>
Status: CLOSED DEFERRED QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: high Docs Contact:
Priority: high    
Version: 7.0CC: amarecek, emaldona, hkario, ksrot, nhosoi, nkinder, pm-eus, rrelyea, sforsber, sramling, vanhoof
Target Milestone: rcKeywords: Regression, ZStream
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: nss-3.16.2.3-2.el7_0.0.1 Doc Type: Bug Fix
Doc Text:
Cause: nss internal call stan_GetCERTCertificate did nor properly ensure sure that objects do not go away until it it's finished with the operation Consequence: A crash in 389-ds-base server was reported in in nss's stan_GetCERTCertificate (pki3hack.c) under the replication replay failure condition. Fix: The certificate code was fix to properly manage objects references. Result: The crashes reported by the 389 directory server no longer occur
 Story Points: ---
Clone Of: 1094468 Environment:
Last Closed: 2015-02-25 16:13:31 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1094468    
Bug Blocks:    
Attachments:
Description Flags
stacktraces from the 389-ds-base core. none

Description Jan Kurik 2014-09-08 17:37:14 UTC 
This bug has been copied from bug #1094468 and has been proposed
to be backported to 7.0 z-stream (EUS).
Comment 6 Sankar Ramalingam 2014-09-15 10:43:43 UTC 
Tests automated in TET RHEL7 branch for 389-ds-base as trac47606 tests.
Comment 9 Noriko Hosoi 2014-09-22 23:48:35 UTC 
Hi Elio,

The crash occurred for me, too.  I'm attaching the stacktraces, which looks different from the one Sankar attached (attachment 939356 [details]), though.

Here's the component list used in my test.
nss-devel-3.16.2-4.el7_0.x86_64
nss-util-devel-3.16.2-1.el7_0.x86_64
nss-debuginfo-3.16.2-4.el7_0.x86_64
nss-softokn-freebl-3.16.2-1.el7_0.x86_64
nss-softokn-freebl-devel-3.16.2-1.el7_0.x86_64
nss-sysinit-3.16.2-4.el7_0.x86_64
nss-tools-3.16.2-4.el7_0.x86_64
nss-util-3.16.2-1.el7_0.x86_64
nss-pkcs11-devel-3.16.2-4.el7_0.x86_64
nss-softokn-devel-3.16.2-1.el7_0.x86_64
nss-softokn-3.16.2-1.el7_0.x86_64
nss-3.16.2-4.el7_0.x86_64

nspr-4.10.6-1.el7_0.x86_64
nspr-debuginfo-4.10.6-1.el7_0.x86_64
nspr-devel-4.10.6-1.el7_0.x86_64

389-ds-base-1.3.1.6-26.el7_0.x86_64
389-ds-base-libs-1.3.1.6-26.el7_0.x86_64
389-ds-base-debuginfo-1.3.1.6-26.el7_0.x86_64
389-ds-base-devel-1.3.1.6-26.el7_0.x86_64
Comment 10 Noriko Hosoi 2014-09-22 23:50:39 UTC 
Created attachment 940216 [details]
stacktraces from the 389-ds-base core.

The core file was generated.  Please let me know if you are interested in examining it.
Comment 17 Sankar Ramalingam 2014-12-08 09:48:02 UTC 
Any updates from nss team for this crash issue? This is not fixed in RHEL7.1 as well.