Bug 2246372
| Summary: | [abrt] gnutls-utils: gnutls_x509_crt_deinit(): gnutls-cli killed by SIGSEGV | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Sandro Bonazzola <sbonazzo> | ||||||||||||||||||||||||||
| Component: | gnutls | Assignee: | Red Hat Crypto Team <crypto-team> | ||||||||||||||||||||||||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||||||||||||||||||||||
| Severity: | unspecified | Docs Contact: | |||||||||||||||||||||||||||
| Priority: | unspecified | ||||||||||||||||||||||||||||
| Version: | 39 | CC: | ansasaki, crypto-team, dueno, fkrenzel, sbonazzo, tm, zfridric | ||||||||||||||||||||||||||
| Target Milestone: | --- | ||||||||||||||||||||||||||||
| Target Release: | --- | ||||||||||||||||||||||||||||
| Hardware: | x86_64 | ||||||||||||||||||||||||||||
| OS: | Unspecified | ||||||||||||||||||||||||||||
| URL: | https://retrace.fedoraproject.org/faf/reports/bthash/49385027c8c2f19e342034eee628c06b216ff23 | ||||||||||||||||||||||||||||
| Whiteboard: | abrt_hash:ffa44a591a4f92cd6ac389809ed1023aa56c4529;VARIANT_ID=workstation; | ||||||||||||||||||||||||||||
| Fixed In Version: | gnutls-3.8.3-1.fc39 gnutls-3.8.3-1.fc38 | Doc Type: | If docs needed, set a value | ||||||||||||||||||||||||||
| Doc Text: | Story Points: | --- | |||||||||||||||||||||||||||
| Clone Of: | Environment: | ||||||||||||||||||||||||||||
| Last Closed: | 2024-01-29 06:25:19 UTC | Type: | --- | ||||||||||||||||||||||||||
| Regression: | --- | Mount Type: | --- | ||||||||||||||||||||||||||
| Documentation: | --- | CRM: | |||||||||||||||||||||||||||
| Verified Versions: | Category: | --- | |||||||||||||||||||||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||||||||||||||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||||||||||||||||||||
| Embargoed: | |||||||||||||||||||||||||||||
| Attachments: |
|
||||||||||||||||||||||||||||
|
Description
Sandro Bonazzola
2023-10-26 12:47:47 UTC
Created attachment 1995622 [details]
File: proc_pid_status
Created attachment 1995623 [details]
File: maps
Created attachment 1995624 [details]
File: limits
Created attachment 1995625 [details]
File: environ
Created attachment 1995626 [details]
File: open_fds
Created attachment 1995627 [details]
File: mountinfo
Created attachment 1995628 [details]
File: os_info
Created attachment 1995629 [details]
File: cpuinfo
Created attachment 1995630 [details]
File: core_backtrace
Created attachment 1995631 [details]
File: exploitable
Created attachment 1995632 [details]
File: dso_list
Created attachment 1995633 [details]
File: backtrace
> Executing ` gnutls-cli -d 1 tls-tls-tls.ctf.siesta.monster -p 8080 --ca-auto-retrieve` , just segfaulted Thank you for the report. I'm trying to reproduce but it looks like the server only has a private address assigned. Would it be possible to point me to a public server, or could you collect the logs following the instruction below? https://www.gnutls.org/manual/html_node/Debugging-and-auditing.html#Debugging-and-auditing I suspect that this might be hitting the case where a gap is found in the certificate chain while the EE cert doesn't have caIssuer AIA. In that case, the default issuer callback set by gnutls-cli returns 0 (success) but doesn't set issuers_size to 0: https://gitlab.com/gnutls/gnutls/-/blob/f2fbef2c50952270eeeadebfacbf718da845fadc/src/cli.c#L2297 (In reply to Daiki Ueno from comment #13) > > Executing ` gnutls-cli -d 1 tls-tls-tls.ctf.siesta.monster -p 8080 --ca-auto-retrieve` , just segfaulted > > Thank you for the report. I'm trying to reproduce but it looks like the > server only has a private address assigned. Would it be possible to point me > to a public server, or could you collect the logs following the instruction > below? > > https://www.gnutls.org/manual/html_node/Debugging-and-auditing. > html#Debugging-and-auditing Sadly tls-tls-tls.ctf.siesta.monster is not available anymore as the CTF event ended last week so I can't provide more detailed debug info. OK, then let's assume my guess on comment 14 is correct :-) I've filed an MR in upstream to fix it: https://gitlab.com/gnutls/gnutls/-/merge_requests/1792 FEDORA-2024-c43a6cc3f8 has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2024-c43a6cc3f8 FEDORA-2024-80428c408c has been submitted as an update to Fedora 39. https://bodhi.fedoraproject.org/updates/FEDORA-2024-80428c408c FEDORA-2024-c43a6cc3f8 has been pushed to the Fedora 38 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-c43a6cc3f8` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-c43a6cc3f8 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2024-80428c408c has been pushed to the Fedora 39 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-80428c408c` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-80428c408c See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2024-80428c408c has been pushed to the Fedora 39 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2024-c43a6cc3f8 (gnutls-3.8.3-1.fc38) has been pushed to the Fedora 38 stable repository. If problem still persists, please make note of it in this bug report. |