Hi again!
No ideas for solutions this time?
Then I come back to my original request of renaming these internal
symbols so that they don't conflict with openssl...
(We've worked around this in pkgsrc by switching libreoffice from nss
to openssl, but now the same problem appeared in konqueror).
Thomas
On Sat, Apr 10, 2021 at 11:06:44AM +0200, Thomas Klausner wrote:
> Hi again!
>
> So I've fixed the pkgsrc package to not link nss users against
> libsoftokn3 any longer, and this fixed the problem in Sigil.
>
> The pkgsrc package had renamed the MD5_Update and SHA1_Update
> functions in nss; since I assumed this to be safe now after stopping
> to link against libsoftokn3, I've removed these patches.
>
> Now libreoffice as built from pkgsrc (with default backend for
> tls=nss) does not "export as PDF" any longer. Here the problem is the
> other way round, the openssl function is preferedly called from the
> nss code.
>
> ...
> (signal handler catching the segfault above this frame)
> #30 <signal handler called>
> #31 0x00007ba175b787d2 in memcpy () from /usr/lib/libc.so.12
> #32 0x00007ba167dc9afe in __memcpy_ichk (len=18446744073702342609,
> src=0x7ba15c693de8, dst=<optimized out>)
> at /usr/include/ssp/string.h:82
> #33 MD5_Update (c=0x7ba14cb7bf00, data_=0x7ba15c693de8, len=<optimized out>)
> at
> /usr/src/crypto/external/bsd/openssl/dist/include/crypto/md32_common.h:150
> #34 0x00007ba12fa27faf in NSC_DigestUpdate (hSession=<optimized out>,
> pPart=0x7ba15c693de8 "%PDF-1.6\n%\303\244\303\274\303\266\303\n",
> ulPartLen=19) at pkcs11c.c:1953
> #35 0x00007ba165c6418b in PK11_DigestOp (context=0x7ba15cad8360,
> in=0x7ba15c693de8 "%PDF-1.6\n%\303\244\303\274\303\266\303\n", inLen=19)
> at pk11cxt.c:1438
> #36 0x00007ba165c51924 in HASH_Update (context=<optimized out>,
> src=src@entry=0x7ba15c693de8 "%PDF-1.6\n%\303\244\303\274\303\266\303\n",
> len=len@entry=19) at sechash.c:452
> #37 0x00007ba1726a170b in comphelper::Hash::update
> (this=this@entry=0x7ba14a74b378,
> pInput=pInput@entry=0x7ba15c693de8
> "%PDF-1.6\n%\303\244\303\274\303\266\303\n", length=length@entry=19)
> at
> /scratch/misc/libreoffice/work/libreoffice-7.1.2.2/comphelper/source/misc/hash.cxx:113
> ...
>
> In frame 33 you see openssl's MD5_Update called from frame 34 nss's
> NSC_DigestUpdate which seems to correspond to
>
> (*context->hashUpdate)(context->cipherInfo, pPart, ulPartLen);
>
> in nss/lib/softoken/pkcs11c.c.
>
> (gdb) fr 34
> #34 0x00007ba12fa27faf in NSC_DigestUpdate (hSession=<optimized out>,
> pPart=0x7ba15c693de8 "%PDF-1.6\n%\303\244\303\274\303\266\303\n",
> ulPartLen=19) at pkcs11c.c:1953
> 1953 pkcs11c.c: No such file or directory.
> (gdb) p *context
> $2 = {type = SFTK_HASH, multi = 1, rsa = 0, doPad = 0, isXCBC = 4, blockSize
> = 0, padDataLength = 0,
> padBuf = "\000\000\000\000\245\000\000\000\000\000\000\000\004\000\000",
> macBuf = '\000' <repeats 12 times>, "\000\000",
> k2 = "\000\000\000\000\302bJ{\000\000mϟP", k3 =
> "{\000\000\070\000\000\000\000\000\000\000\335\246K", macSize =
> 135932732871187,
> cipherInfo = 0x7ba14cb7bf00, hashInfo = 0x0, cipherInfoLen = 88,
> currentMech = 528, update = 0x0, aeadUpdate = 0x0,
> hashUpdate = 0x7ba167dc9a50 <MD5_Update>, end = 0x7ba12fa478c5 <MD5_End>,
> destroy = 0x7ba12fa4777b <MD5_DestroyContext>,
> hashdestroy = 0x4a58647700000000, verify = 0x39795a79396d4c73, maxLen = 16,
> key = 0x0}
> (gdb) p &MD5_Update
> $4 = (int (*)(MD5_CTX *, const void *, size_t)) 0x7ba167dc9a50 <MD5_Update>
> (gdb) info shared
> From To Syms Read Shared Object Library
> ...
> 0x00007ba167c8e000 0x00007ba167dfbd1b Yes /usr/lib/libcrypto.so.14
> ...
>
> Is there another bug in pkgsrc here, and if so, what is it?
>
> Thanks,
> Thomas
>
> --
> You received this message because you are subscribed to the Google Groups
> "dev-tech-crypto@mozilla.org" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to dev-tech-crypto+unsubscr...@mozilla.org.
> To view this discussion on the web visit
> https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/20210410090644.zc5uvak6rsqud6hd%40yt.nih.at.
--
You received this message because you are subscribed to the Google Groups
"dev-tech-crypto@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to dev-tech-crypto+unsubscr...@mozilla.org.
To view this discussion on the web visit
https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/20210415083641.rcejdadzgudwvrap%40yt.nih.at.
