https://bz.apache.org/ooo/show_bug.cgi?id=128535

dam...@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dam...@apache.org

--- Comment #5 from dam...@apache.org ---
(In reply to Matthias Seidel from comment #3)
> See:
> https://bz.apache.org/ooo/show_bug.cgi?id=128591
> 
> Maybe we have the same root problem here?

No it's not. The port of WebDAV to Curl and OpenSSL was only done on trunk, and
wasn't backported to AOO41X or AOO42X. This was reported with version 4.1.13,
and even in the stack trace pasted here, you can see it's using Serf instead of
Curl.

The crash here happens during the custom certificate verification process our
WebDAV content provider uses, and happens within NSS. The Linux crash in bug
128591 happens earlier, while Curl calls into OpenSSL during the connection
process, before reaching our custom certificate verification callback.

0   libplds4.dylib                             0x16859d0a5
PL_HashTableLookupConst + 16
1   libnssutil3.dylib                          0x168a273da SECOID_FindOID_Util
+ 25
2   libsmime3.dylib                            0x1688c95b0
CERT_DecodeCertPackage + 335
3   libnss3.dylib                              0x168ed7b40 0x168e14000 + 801600
4   libnss3.dylib                              0x168ed7de3 0x168e14000 + 802275
5   libnss3.dylib                              0x168ed3ed0 0x168e14000 + 786128
6   libnss3.dylib                              0x168ed4cca 0x168e14000 + 789706
7   libnss3.dylib                              0x168ea0ef0 0x168e14000 + 577264
8   libnss3.dylib                              0x168e9f631 0x168e14000 + 570929
9   libnss3.dylib                              0x168e9d9f4 0x168e14000 + 563700
10  libnss3.dylib                              0x168e24b8d CERT_PKIXVerifyCert
+ 1437
11  libxsec_xmlsec.dylib                       0x1689ba337
SecurityEnvironment_NssImpl::verifyCertificate(com::sun::star::uno::Reference<com::sun::star::security::XCertificate>
const&,
com::sun::star::uno::Sequence<com::sun::star::uno::Reference<com::sun::star::security::XCertificate>
> const&) + 1735
12  libucpdav1.dylib                           0x1687bbece
http_dav_ucp::SerfSession::verifySerfCertificateChain(int,
serf_ssl_certificate_t const* const*, int) + 2398

-- 
You are receiving this mail because:
You are the assignee for the issue.

Reply via email to