Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
For bugs related to Red Hat Enterprise Linux 5 product line. The current stable release is 5.10. For Red Hat Enterprise Linux 6 and above, please visit Red Hat JIRA https://issues.redhat.com/secure/CreateIssue!default.jspa?pid=12332745 to report new issues.

Bug 637398

Summary: X509Extension Segmentation Fault
Product: Red Hat Enterprise Linux 5 Reporter: Andrew Rankin <andrew>
Component: pyOpenSSLAssignee: Tomas Mraz <tmraz>
Status: CLOSED ERRATA QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: medium    
Version: 5.5CC: ebenes, erinn.looneytriggs, gregswift, mvadkert, rdassen, rvokal, shuff, spoyarek
Target Milestone: rcKeywords: Patch
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: pyOpenSSL-0.6-2.el5 Doc Type: Bug Fix
Doc Text:
Previously, an attempt to use the "crypto.X509Extension" class caused the calling application to terminate unexpectedly with a segmentation fault. This update applies a patch that addresses this issue, and using this class no longer causes such application to crash.
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-05-04 08:35:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 590060    
Attachments:
Description Flags
Patch to fix none

Description Andrew Rankin 2010-09-25 14:01:21 UTC
Description of problem:

When trying to use X509Extension in pyOpenSSL on RHEL 5.4, 5.5 & 4.8 I get a segmentation fault.

Version-Release number of selected component (if applicable):

pyOpenSSL-0.6-1.p24.7.2.2
openssl-0.9.8e-12.el5_4.6

How reproducible: Always.

Steps to Reproduce:
  
[rar@ares ~]$ python
Python 2.4.3 (#1, Sep  3 2009, 15:37:37)
[GCC 4.1.2 20080704 (Red Hat 4.1.2-46)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from OpenSSL import crypto
>>> xt = crypto.X509Extension('basicConstraints',0 ,'CA:FALSE')
Segmentation fault

Actual results: Segmentation fault.

Comment 1 Andrew Rankin 2010-09-28 00:15:15 UTC
Created attachment 450062 [details]
Patch to fix

Appears to be this bug:

http://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg162203.html

[root@ares]# python
Python 2.4.3 (#1, Sep  3 2009, 15:37:37) 
[GCC 4.1.2 20080704 (Red Hat 4.1.2-46)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from OpenSSL import crypto
>>> xt = crypto.X509Extension('basicConstraints',0 ,'CA:FALSE')
>>> 

The Patch from that link is attached.

Andrew

Comment 2 Tomas Mraz 2010-09-29 06:58:38 UTC
Can you please open a support request with the regular support channels - http://www.redhat.com/support/ - so we can properly prioritize the bug fix?

Comment 3 Andrew Rankin 2010-09-30 12:21:22 UTC
Tomas - 

Red Hat case #00349980 has been opened by our IT department.

Thanks,
Andrew

Comment 5 Erinn Looney-Triggs 2010-11-08 20:17:12 UTC
Case 00378460 opened as well, maybe it will speed things along a bit.

-Erinn

Comment 6 RHEL Program Management 2011-01-11 20:01:30 UTC
This request was evaluated by Red Hat Product Management for
inclusion in the current release of Red Hat Enterprise Linux.
Because the affected component is not scheduled to be updated in the
current release, Red Hat is unfortunately unable to address this
request at this time. Red Hat invites you to ask your support
representative to propose this request, if appropriate and relevant,
in the next release of Red Hat Enterprise Linux.

Comment 7 RHEL Program Management 2011-01-11 23:23:45 UTC
This request was erroneously denied for the current release of
Red Hat Enterprise Linux.  The error has been fixed and this
request has been re-proposed for the current release.

Comment 11 Tomas Mraz 2011-03-30 09:54:07 UTC
The patch is not quite correct with commenting out the deallocation but I fixed it.

Comment 13 Jaromir Hradilek 2011-04-04 15:04:38 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Previously, an attempt to use the "crypto.X509Extension" class caused the calling application to terminate unexpectedly with a segmentation fault. This update applies a patch that addresses this issue, and using this class no longer causes such application to crash.

Comment 15 errata-xmlrpc 2011-05-04 08:35:52 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0483.html