Red Hat Bugzilla – Bug 985492
p11-kit: pthread_atfork handling
Last modified: 2017-08-01 12:52:09 EDT
I'm not convinced that the pthread_atfork handling is correct. The lock underlying p11_lock() needs to be acquired before the fork and released afterwards. Otherwise, the reinitialization in the child process can fail if the a fork happens while the p11_lock has been taken by another thread.
pthread_atfork() is pretty much impossible to get correct. We simply try to do what the PKCS#11 spec says. But it's pretty bogus.
But I think this is too risky to fix in the stable branch. Unless you have objections I'll change to RHEL 7.1.
This needs work in Fedora before updating it in RHEL, bumping to RHEL 7.2
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.