Source: libssh
Version: 0.9.5-1
Severity: important
Tags: sid bullseye
Control: block -1 by 928224

Dear Maintainer,

Latest autopkgtest at https://salsa.debian.org/ci-team/autopkgtest.git
added support of armhf qemu testbed. When I run the test in libssh on
armhf qemu testbed, it fails with the following error.
I suspect this is a false positive caused by another bug #928224,
but this could be a security issue, I report this here.
The same test passes on arm64 qemu.
The full log of autopkgtest is attached.


====== password authentication with valgrind ======
[2021/02/20 12:30:08.062388, 1] ssh_packet_disconnect_callback:  Received 
SSH_MSG_DISCONNECT: 11:disconnected by user
==1362== Memcheck, a memory error detector
==1362== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==1362== Using Valgrind-3.16.1 and LibVEX; rerun with -h for copyright info
==1362== Command: /tmp/autopkgtest.WgNCoE/autopkgtest_tmp/mock-sshd --user=joe 
--password=foobar --port 1234 -v
==1362== 
disInstr(thumb): unhandled instruction: 0xEC51 0x0F1E
==1362== valgrind: Unrecognised instruction at address 0x4b90927.
==1362==    at 0x4B90926: ??? (in /usr/lib/arm-linux-gnueabihf/libcrypto.so.1.1)
==1362== Your program just tried to execute an instruction that Valgrind
==1362== did not recognise.  There are two possible reasons for this.
==1362== 1. Your program has a bug and erroneously jumped to a non-code
==1362==    location.  If you are running Memcheck and you just saw a
==1362==    warning about a bad jump, it's probably your program's fault.
==1362== 2. The instruction is legitimate but Valgrind doesn't handle it,
==1362==    i.e. it's Valgrind's fault.  If you think this is the case or
==1362==    you are not sure, please let us know and we'll try to fix it.
==1362== Either way, Valgrind will now raise a SIGILL signal which will
==1362== probably kill your program.
==1362== Invalid write of size 4
==1362==    at 0x4955BF6: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda319e0 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4972316: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda319d8 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4978D7A: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda319c0 is on thread 1's stack
==1362==  24 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4964F04: _ssh_log (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31598 is on thread 1's stack
==1362==  1056 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4964D16: ssh_get_log_level (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31598 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x496046A: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda319c8 is on thread 1's stack
==1362==  16 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x49714A6: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda319d8 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x496114A: ssh_init (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda317a0 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x497574A: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31798 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x497576E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31798 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4964CE2: ssh_set_log_level (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda317a0 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x496F24A: ssh_event_new (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda316b0 is on thread 1's stack
==1362==  16 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x496747E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda316b0 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x497F10E: ssh_bind_new (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda316c0 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x496F9EE: ssh_new (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda316b0 is on thread 1's stack
==1362==  16 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x49714FA: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda316a0 is on thread 1's stack
==1362==  16 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x49587FE: ssh_buffer_new (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda316a0 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4958736: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31674 is on thread 1's stack
==1362==  32 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4956032: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda316a0 is on thread 1's stack
==1362==  16 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4967500: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda316a0 is on thread 1's stack
==1362==  16 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4969558: ssh_bind_options_set (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31690 is on thread 1's stack
==1362==  40 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x497F140: ssh_bind_listen (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda3164c is on thread 1's stack
==1362==  104 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x497EE32: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31644 is on thread 1's stack
==1362==  24 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x496CAB8: ssh_pki_import_privkey_file (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31594 is on thread 1's stack
==1362==  152 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x496C9BC: ssh_pki_import_privkey_base64 (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31588 is on thread 1's stack
==1362==  24 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4964DC0: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda30cd8 is on thread 1's stack
==1362==  1152 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x4964D6E: ssh_get_log_callback (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda30ce8 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
[2021/02/20 12:30:10.000926, 2] ssh_pki_import_privkey_base64:  Trying to 
decode privkey passphrase=false
==1362== Invalid write of size 4
==1362==    at 0x4976404: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31550 is on thread 1's stack
==1362==  48 bytes below stack pointer
==1362== 
==1364== Invalid write of size 4
==1364==    at 0x496D34C: ssh_pki_import_pubkey_file (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3162c is on thread 1's stack
==1364==  136 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496C726: ssh_key_type_from_name (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31638 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496D1C6: ssh_pki_import_pubkey_base64 (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31628 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49583D8: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315f0 is on thread 1's stack
==1364==  40 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4958338: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315d0 is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49588FE: ssh_buffer_add_data (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315f0 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4958C26: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31610 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4958BB2: ssh_buffer_get_data (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31600 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4972166: ssh_string_new (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31610 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496BFBC: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315e0 is on thread 1's stack
==1364==  64 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49594D4: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315dc is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1362== Invalid write of size 4
==1364== Invalid write of size 4
==1364==    at 0x495907C: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31574 is on thread 1's stack
==1364==  72 bytes below stack pointer
==1364== 
==1362==    at 0x49611BA: ssh_finalize (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda317a0 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1364== Invalid write of size 4
==1364==    at 0x4976996: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315d8 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4958692: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315c8 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49722D8: ssh_string_burn (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315e8 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4958844: ssh_buffer_free (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31628 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497F75E: ssh_bind_accept (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3169c is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1362== Invalid write of size 4
==1362==    at 0x4955BCA: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda31800 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x49603EA: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda317f8 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== Invalid write of size 4
==1362==    at 0x49714D2: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1362==  Address 0xbda317f8 is on thread 1's stack
==1362==  8 bytes below stack pointer
==1362== 
==1362== 
==1362== HEAP SUMMARY:
==1362==     in use at exit: 15,769 bytes in 63 blocks
==1362==   total heap usage: 173 allocs, 110 frees, 140,003 bytes allocated
==1362== 
==1362== LEAK SUMMARY:
==1362==    definitely lost: 1,156 bytes in 1 blocks
==1362==    indirectly lost: 1,511 bytes in 21 blocks
==1362==      possibly lost: 0 bytes in 0 blocks
==1362==    still reachable: 13,102 bytes in 41 blocks
==1362==         suppressed: 0 bytes in 0 blocks
==1362== Rerun with --leak-check=full to see details of leaked memory
==1362== 
==1362== For lists of detected and suppressed errors, rerun with: -s
==1362== ERROR SUMMARY: 54 errors from 32 contexts (suppressed: 0 from 0)
==1364== Invalid write of size 4
==1364==    at 0x497F590: ssh_bind_accept_fd (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31670 is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4969A36: ssh_bind_options_parse_config (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31670 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49801D8: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31220 is on thread 1's stack
==1364==  1088 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4971844: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31680 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4971746: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31664 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497187A: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31670 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496EE92: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31650 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49715CA: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31680 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4975C2C: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31628 is on thread 1's stack
==1364==  72 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497864E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31670 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497E306: ssh_handle_key_exchange (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda316b0 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x495CD8E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31574 is on thread 1's stack
==1364==  312 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4971AE6: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31578 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4971962: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3154c is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497DC50: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315f4 is on thread 1's stack
==1364==  176 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49786B6: ssh_get_random (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31600 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4975138: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315bc is on thread 1's stack
==1364==  48 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4974FF4: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315a0 is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4974F7E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315c0 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49685CA: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda315dc is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496FC24: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31670 is on thread 1's stack
==1364==  48 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4967C46: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31670 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496FBA2: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31660 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496F21E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31668 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496EF6E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31658 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496EE36: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31648 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496F104: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3161c is on thread 1's stack
==1364==  56 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4967DB6: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31614 is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4971B24: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3061c is on thread 1's stack
==1364==  4096 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4971B28: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda305cc is on thread 1's stack
==1364==  4176 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4967CDA: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda31664 is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497DAEC: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3059c is on thread 1's stack
==1364==  48 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497DEB2: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30590 is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
[2021/02/20 12:30:11.206368, 2] ssh_server_connection_callback:  SSH client 
banner: SSH-2.0-OpenSSH_8.4p1 Debian-4
==1364== Invalid write of size 4
==1364==    at 0x4967A94: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30554 is on thread 1's stack
==1364==  48 bytes below stack pointer
==1364== 
[2021/02/20 12:30:11.215319, 2] ssh_analyze_banner:  Analyzing banner: 
SSH-2.0-OpenSSH_8.4p1 Debian-4
[2021/02/20 12:30:11.224430, 2] ssh_analyze_banner:  We are talking to an 
OpenSSH client version: 8.4 (80400)
==1364== Invalid write of size 4
==1364==    at 0x4969E46: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30590 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4961F94: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30550 is on thread 1's stack
==1364==  48 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4958EE2: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30514 is on thread 1's stack
==1364==  48 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4958CB8: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304d4 is on thread 1's stack
==1364==  64 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4961F1E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30560 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4958A86: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30554 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49721A2: ssh_string_from_char (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30550 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49589E8: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30550 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496A3DE: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30540 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496A0E4: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304bc is on thread 1's stack
==1364==  120 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4958AAE: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304b0 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496B4D0: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30454 is on thread 1's stack
==1364==  96 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49588A4: ssh_buffer_reinit (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304d0 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496A6EC: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3057c is on thread 1's stack
==1364==  80 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x495899E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30580 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496B462: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3056c is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4969E8E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30580 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496A5CE: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30564 is on thread 1's stack
==1364==  40 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4962248: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304f8 is on thread 1's stack
==1364==  96 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49621EE: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304f8 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497225A: ssh_string_to_char (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304f8 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== 
==1364== More than 100 errors detected.  Subsequent errors
==1364== will still be recorded, but in less detail than before.
==1364== Invalid write of size 4
==1364==    at 0x4958A16: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30504 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4967E66: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304f8 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49750A0: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304c8 is on thread 1's stack
==1364==  40 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496152C: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304b4 is on thread 1's stack
==1364==  40 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4961820: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30488 is on thread 1's stack
==1364==  80 bytes below stack pointer
==1364== 
[2021/02/20 12:30:11.394264, 2] ssh_kex_select_methods:  Negotiated 
ecdh-sha2-nistp256,rsa-sha2-512,aes128-ctr,aes128-ctr,hmac-sha2-256-...@openssh.com,hmac-sha2-256-...@openssh.com,none,none,,
==1364== Invalid write of size 4
==1364==    at 0x49728E0: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304b4 is on thread 1's stack
==1364==  40 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496C87E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304c0 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496C44A: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304c0 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4969DEA: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304b0 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497E15E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30504 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4977D58: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304c4 is on thread 1's stack
==1364==  72 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4969E1A: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304d0 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4977C28: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304a0 is on thread 1's stack
==1364==  40 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497E1DE: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304b4 is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496D69C: ssh_pki_export_privkey_to_pubkey (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304a0 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496D6D4: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304b0 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49769F4: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30454 is on thread 1's stack
==1364==  72 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x495861A: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30450 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49721F2: ssh_string_fill (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30440 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496BE90: ssh_key_free (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304b0 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496BE1E: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda304a8 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496D232: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3048c is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497223A: ssh_string_get_char (in 
/usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30490 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4961AA4: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30454 is on thread 1's stack
==1364==  104 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x4978986: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30444 is on thread 1's stack
==1364==  32 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49788DE: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30448 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496DE8C: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30498 is on thread 1's stack
==1364==  48 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496DC42: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30488 is on thread 1's stack
==1364==  24 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x496DA72: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30480 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49775C0: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda3044c is on thread 1's stack
==1364==  64 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x497598A: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30460 is on thread 1's stack
==1364==  8 bytes below stack pointer
==1364== 
==1364== Invalid write of size 4
==1364==    at 0x49757B2: ??? (in /usr/lib/arm-linux-gnueabihf/libssh.so.4.8.6)
==1364==  Address 0xbda30450 is on thread 1's stack
==1364==  16 bytes below stack pointer
==1364== 
disInstr(thumb): unhandled instruction: 0xEBAD 0x1CCA
==1364== valgrind: Unrecognised instruction at address 0x4b8e9bd.
==1364==    at 0x4B8E9BC: ??? (in /usr/lib/arm-linux-gnueabihf/libcrypto.so.1.1)
==1364== Your program just tried to execute an instruction that Valgrind
==1364== did not recognise.  There are two possible reasons for this.
==1364== 1. Your program has a bug and erroneously jumped to a non-code
==1364==    location.  If you are running Memcheck and you just saw a
==1364==    warning about a bad jump, it's probably your program's fault.
==1364== 2. The instruction is legitimate but Valgrind doesn't handle it,
==1364==    i.e. it's Valgrind's fault.  If you think this is the case or
==1364==    you are not sure, please let us know and we'll try to fix it.
==1364== Either way, Valgrind will now raise a SIGILL signal which will
==1364== probably kill your program.
==1364== 
==1364== Process terminating with default action of signal 4 (SIGILL)
==1364==  Illegal opcode at address 0x4B8E9BD
==1364==    at 0x4B8E9BC: ??? (in /usr/lib/arm-linux-gnueabihf/libcrypto.so.1.1)
==1364== 
==1364== HEAP SUMMARY:
==1364==     in use at exit: 39,300 bytes in 243 blocks
==1364==   total heap usage: 708 allocs, 465 frees, 160,710 bytes allocated
==1364== 
==1364== LEAK SUMMARY:
==1364==    definitely lost: 0 bytes in 0 blocks
==1364==    indirectly lost: 0 bytes in 0 blocks
==1364==      possibly lost: 0 bytes in 0 blocks
==1364==    still reachable: 39,300 bytes in 243 blocks
==1364==         suppressed: 0 bytes in 0 blocks
==1364== Rerun with --leak-check=full to see details of leaked memory
==1364== 
==1364== For lists of detected and suppressed errors, rerun with: -s
==1364== ERROR SUMMARY: 839 errors from 132 contexts (suppressed: 0 from 0)
Connection closed by 127.0.0.1 port 1234
autopkgtest [21:30:12]: test libssh-server: -----------------------]
autopkgtest [21:30:14]: test libssh-server:  - - - - - - - - - - results - - - 
- - - - - - -
libssh-server        FAIL non-zero exit status 253
autopkgtest [21:30:15]: @@@@@@@@@@@@@@@@@@@@ summary
libssh-server        FAIL non-zero exit status 253
qemu-system-aarch64: terminating on signal 15 from pid 166611 (/usr/bin/python3)

Best regards, Ryutaroh Matsumoto


-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: arm64 (aarch64)

Kernel: Linux 5.9.16-raspi4b (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_CRAP, TAINT_UNSIGNED_MODULE
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Attachment: libssh-log.tar.xz
Description: application/xz

Reply via email to