Hello,

The version I'm using is openssl-1.0.0d. I wrote a routing that while
there is data into the SSL object, do some actions (SSL_read, etc)

But every time, after a few packets goes through the routine, it crash:

Program received signal SIGSEGV, Segmentation fault.
0x0036f5a7 in ?? () from /lib/i386-linux-gnu/libc.so.6
(gdb) bt
#0  0x0036f5a7 in ?? () from /lib/i386-linux-gnu/libc.so.6
#1  0x080b2970 in bio_read (bio=0x828b300, buf=0x82acb23
"\027\003\001\001", size_=5) at bss_bio.c:248
#2  0x080ae623 in BIO_read (b=0x828b300, out=0x82acb23, outl=5) at bio_lib.c:212
#3  0x08097e09 in ssl3_read_n (s=0x828b008, n=5, max=5, extend=0) at
s3_pkt.c:238
#4  0x08098020 in ssl3_get_record (s=0x828b008) at s3_pkt.c:317
#5  0x080990f6 in ssl3_read_bytes (s=0x828b008, type=23,
buf=0xbffff53c "", len=1, peek=1) at s3_pkt.c:959
#6  0x08095d8b in ssl3_read_internal (s=0x828b008, buf=0xbffff53c,
len=1, peek=1) at s3_lib.c:3265
#7  0x08095e44 in ssl3_peek (s=0x828b008, buf=0xbffff53c, len=1) at
s3_lib.c:3290
#8  0x0807923b in SSL_peek (s=0x828b008, buf=0xbffff53c, num=1) at ssl_lib.c:969
#9  0x001657b6 in net_on_input (peer=0x82856d0) at net.c:308
[...]

(gdb) frame 1
#1  0x080b2970 in bio_read (bio=0x828b300, buf=0x82acb23
"\027\003\001\001", size_=5) at bss_bio.c:248
248                     memcpy(buf, peer_b->buf + peer_b->offset, chunk);
(gdb) print peer_b->buf
$1 = 0xc4000045 <Address 0xc4000045 out of bounds>
(gdb) print peer_b->offset
$2 = 591641582
(gdb) print chunk
$3 = 3703873727
(gdb)

There is definitively something wrong here. I would need some help to
debug it, thank you.

- nicboul
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to