Hello,

I'm trying to implement client SSL authentication for Linux [0], but
I'm facing a couple of issues with my current code (patch set >= 3 in
[1]).
The first one is the one in the description, SSL_ClearSessionCache
fails by invalid free (according to valgrind) when closing Chromium if
some successful client authentication has been done during the
execution.

The other one is a segmentation fault that happens sometimes when
reloading a site in which the client was succesfully authenticated
using SSL, it seems to be produced by some sqlite3 method, but I don't
know if I'm provoking it or it's something in the lower layers. Here
is the gdb output:

#0  0xb71778aa in memcpy () from /lib/tls/i686/cmov/libc.so.6
#1  0x09fb8b34 in sqlite3VdbeMemSetStr (pMem=0xb282dcb0, z=0x31617a6f
<Address 0x31617a6f out of bounds>, n=101658641, enc=0 '\0',
xDel=0xffffffff)
    at /home/kronoss/src/chromium/src/third_party/sqlite/src/vdbemem.c:
715
#2  0x09fb361c in bindText (pStmt=0xb50cd120, i=1, zData=0x31617a6f,
nData=101658641, xDel=0xffffffff, encoding=0 '\0')
    at /home/kronoss/src/chromium/src/third_party/sqlite/src/vdbeapi.c:
937
#3  0x09fb36cc in sqlite3_bind_blob (pStmt=0xb50cd120, i=1,
zData=0x31617a6f, nData=101658641, xDel=0xffffffff)
    at /home/kronoss/src/chromium/src/third_party/sqlite/src/vdbeapi.c:
960
#4  0xb1b3e85d in sdb_FindObjectsInit (sdb=0xb285da98,
template=0xb59aeaa0, count=1, find=0xb59ae9d8) at sdb.c:716
#5  0xb1b40814 in sftkdb_FindObjectsInit (handle=0xb286bbc8,
template=0xb59aeaa0, count=1, find=0xb59ae9d8) at sftkdb.c:1219
#6  0xb1b281d7 in sftk_searchDatabase (handle=0xb286bbc8,
search=0xb28b0da0, pTemplate=0xb59aeaa0, ulCount=1) at pkcs11.c:4138
#7  0xb1b2a113 in NSC_FindObjectsInit (hSession=16777217,
pTemplate=0xb59aeaa0, ulCount=1) at pkcs11.c:4263
#8  0xb758f1ae in pk11_FindObjectByTemplate (slot=0xb50efba0,
theTemplate=0xb59aeaa0, tsize=1) at pk11obj.c:1477
#9  0xb757ab6a in PK11_FindObjectForCert (cert=0xb280c208, wincx=0x0,
pSlot=0xb59aeae8) at pk11cert.c:1172
#10 0xb757acbc in PK11_FindKeyByAnyCert (cert=0xb280c208, wincx=0x0)
at pk11cert.c:1650
#11 0x09d13825 in net::SSLClientSocketNSS::ClientAuthHandler
(arg=0xb283cb70, socket=0xb2897538, caNames=0xb59aeda4,
pRetCert=0xb2a9e8d4, pRetKey=0xb2a9e8d8)
    at /home/kronoss/src/chromium/src/net/socket/
ssl_client_socket_nss.cc:733
...

Maybe both issues are related, could someone give me some light about
those issues?

Thanks.


Jaime.

[0] - Issue 16830: Client SSL Certificate Support (Backend) for Linux
[1] - http://codereview.chromium.org/220009/show

--~--~---------~--~----~------------~-------~--~----~
Chromium Discussion mailing list: [email protected] 
View archives, change email options, or unsubscribe: 
    http://groups.google.com/group/chromium-discuss
-~----------~----~----~----~------~----~------~--~---

Reply via email to