The big difference that I notice looking at the alpine packages is that in
3.17 (crashes) cyrus-sasl-digestmd5 depends on "libcrypto3" and in 3.16
(works) cyrus-sasl-digestmd5 depends on "libcrypto1.1"

https://pkgs.alpinelinux.org/package/v3.17/main/x86_64/cyrus-sasl-digestmd5
https://pkgs.alpinelinux.org/package/v3.16/main/x86_64/cyrus-sasl-digestmd5

Christopher Hardekopf
Software Engineer
[email protected]
BASIS International Ltd.
+1.505.345.5232 Main


On Wed, Jan 4, 2023 at 6:47 AM Chris Hardekopf <[email protected]> wrote:

> For more information. I tried this a couple of different ways and using
> docker found that it works fine in
>
> alpine:3.16
>
> and crashes in
>
> alpine:3.17
>
> Christopher Hardekopf
> Software Engineer
> [email protected]
> BASIS International Ltd.
> +1.505.345.5232 Main
>
>
> On Wed, Jan 4, 2023 at 6:39 AM chrish via SASL <[email protected]>
> wrote:
>
>> I am trying to use svn with an svn server using DIGEST-MD5 sasl
>> authentication and after a system update my client is now crashing inside
>> of the authentication. For example:
>>
>> $ svn info svn://<host>/<archive>
>> zsh: segmentation fault (core dumped)  svn info svn://<host>/<archive>
>>
>> I can see using "journalctl" that it crashed inside of the DIGEST-MD5
>> authentication:
>>
>> Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 client step 2
>> Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 parse_server_challenge()
>> Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 ask_user_info()
>> Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 make_client_response()
>> Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 create_layer_keys()
>> Jan 04 06:30:08 neji svn[66195]: DIGEST-MD5 client step 3
>> Jan 04 06:30:08 neji audit[66195]: ANOM_ABEND auid=1000 uid=1000 gid=1000
>> ses=4 pid=66195 comm="svn" exe="/usr/bin/svn" sig=11 res=1
>> Jan 04 06:30:08 neji kernel: svn[66195]: segfault at 10 ip
>> 00007fa821bcf934 sp 00007ffe383c8a90 error 4 in
>> libcrypto.so.3[7fa821aeb000+268000]
>> Jan 04 06:30:08 neji kernel: Code: 41 54 55 53 48 83 ec 28 64 48 8b 04 25
>> 28 00 00 00 48 89 44 24 18 31 c0 48 85 d2 0f 84 9d 01 00 00 c7 02 00 00 00
>> 00 48 89 d5 <8b> 57 10 48 89 fb 85 d2 0f 85 e6 00 00 00 48 8b 07 48 85 c0
>> 0f 84
>> Jan 04 06:30:08 neji kernel: audit: type=1701 audit(1672839008.147:339):
>> auid=1000 uid=1000 gid=1000 ses=4 pid=66195 comm="svn" exe="/usr/bin/svn"
>> sig=11 res=1
>> Jan 04 06:30:08 neji audit: BPF prog-id=70 op=LOAD
>> Jan 04 06:30:08 neji audit: BPF prog-id=71 op=LOAD
>> Jan 04 06:30:08 neji audit: BPF prog-id=72 op=LOAD
>> Jan 04 06:30:08 neji systemd[1]: Started Process Core Dump (PID 66223/UID
>> 0).
>> Jan 04 06:30:08 neji audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295
>> ses=4294967295 msg='unit=systemd-coredump@4-66223-0 comm="systemd"
>> exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>> Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.200:340):
>> prog-id=70 op=LOAD
>> Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.200:341):
>> prog-id=71 op=LOAD
>> Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.200:342):
>> prog-id=72 op=LOAD
>> Jan 04 06:30:08 neji kernel: audit: type=1130 audit(1672839008.200:343):
>> pid=1 uid=0 auid=4294967295 ses=4294967295
>> msg='unit=systemd-coredump@4-66223-0 comm="systemd"
>> exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>> Jan 04 06:30:08 neji systemd-coredump[66224]: Process 66195 (svn) of user
>> 1000 dumped core.
>>
>>                                               Stack trace of thread 66195:
>>                                               #0  0x00007fa821bcf934
>> EVP_DecryptUpdate (libcrypto.so.3 + 0x195934)
>>                                               #1  0x00007fa822557545 n/a
>> (libdigestmd5.so + 0x3545)
>>                                               #2  0x00007fa822558591 n/a
>> (libdigestmd5.so + 0x4591)
>>                                               #3  0x00007fa82220bfdb
>> _plug_decode (libsasl2.so.3 + 0x14fdb)
>>                                               #4  0x00007fa82255e197 n/a
>> (libdigestmd5.so + 0xa197)
>>                                               #5  0x00007fa822201938
>> sasl_decode (libsasl2.so.3 + 0xa938)
>>                                               #6  0x00007fa822221ac4 n/a
>> (libsvn_ra_svn-1.so.0 + 0xbac4)
>>                                               #7  0x00007fa82222dbe1
>> svn_ra_svn__stream_read (libsvn_ra_svn-1.so.0 + 0x17be1)
>>                                               #8  0x00007fa8222218a3 n/a
>> (libsvn_ra_svn-1.so.0 + 0xb8a3)
>>                                               #9  0x00007fa8222221da n/a
>> (libsvn_ra_svn-1.so.0 + 0xc1da)
>>                                               #10 0x00007fa82222cdc3
>> svn_ra_svn__read_item (libsvn_ra_svn-1.so.0 + 0x16dc3)
>>                                               #11 0x00007fa82222cf3b
>> svn_ra_svn__read_tuple (libsvn_ra_svn-1.so.0 + 0x16f3b)
>>                                               #12 0x00007fa82222d398
>> svn_ra_svn__read_cmd_response (libsvn_ra_svn-1.so.0 + 0x17398)
>>                                               #13 0x00007fa822232b14 n/a
>> (libsvn_ra_svn-1.so.0 + 0x1cb14)
>>                                               #14 0x00007fa82221e6e0 n/a
>> (libsvn_ra_svn-1.so.0 + 0x86e0)
>>                                               #15 0x00007fa82288fa90
>> svn_ra_open5 (libsvn_ra-1.so.0 + 0x7a90)
>>                                               #16 0x00007fa8229c2f03
>> svn_client__open_ra_session_internal (libsvn_client-1.so.0 + 0x68f03)
>>                                               #17 0x00007fa8229c89c2
>> svn_client__ra_session_from_path2 (libsvn_client-1.so.0 + 0x6e9c2)
>>                                               #18 0x00007fa82299f4df
>> svn_client_info4 (libsvn_client-1.so.0 + 0x454df)
>>                                               #19 0x0000558b02290ca7 n/a
>> (svn + 0x1aca7)
>>                                               #20 0x0000558b022a4e7a n/a
>> (svn + 0x2ee7a)
>>                                               #21 0x0000558b022830ee n/a
>> (svn + 0xd0ee)
>>                                               #22 0x00007fa8225b2290 n/a
>> (libc.so.6 + 0x23290)
>>                                               #23 0x00007fa8225b234a
>> __libc_start_main (libc.so.6 + 0x2334a)
>>                                               #24 0x0000558b02283175 n/a
>> (svn + 0xd175)
>>                                               ELF object binary
>> architecture: AMD x86-64
>> Jan 04 06:30:08 neji systemd[1]: [email protected]:
>> Deactivated successfully.
>> Jan 04 06:30:08 neji kernel: audit: type=1131 audit(1672839008.264:344):
>> pid=1 uid=0 auid=4294967295 ses=4294967295
>> msg='unit=systemd-coredump@4-66223-0 comm="systemd"
>> exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>> Jan 04 06:30:08 neji audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295
>> ses=4294967295 msg='unit=systemd-coredump@4-66223-0 comm="systemd"
>> exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>> Jan 04 06:30:08 neji audit: BPF prog-id=0 op=UNLOAD
>> Jan 04 06:30:08 neji audit: BPF prog-id=0 op=UNLOAD
>> Jan 04 06:30:08 neji audit: BPF prog-id=0 op=UNLOAD
>> Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.420:345):
>> prog-id=0 op=UNLOAD
>> Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.420:346):
>> prog-id=0 op=UNLOAD
>> Jan 04 06:30:08 neji kernel: audit: type=1334 audit(1672839008.420:347):
>> prog-id=0 op=UNLOAD
>> Jan 04 06:30:08 neji svn[66262]: DIGEST-MD5 common mech free
>> Jan 04 06:30:08 neji svn[66280]: DIGEST-MD5 common mech free
>> Jan 04 06:30:08 neji svn[66285]: DIGEST-MD5 common mech free
>> Jan 04 06:30:09 neji svn[66291]: DIGEST-MD5 common mech free
>> Jan 04 06:30:09 neji svn[66313]: DIGEST-MD5 common mech free
>> Jan 04 06:30:09 neji svn[66319]: DIGEST-MD5 common mech free
>> Jan 04 06:30:09 neji svn[66325]: DIGEST-MD5 common mech free
>> Jan 04 06:30:09 neji svn[66331]: DIGEST-MD5 common mech free
>> Jan 04 06:30:09 neji svn[66337]: DIGEST-MD5 common mech free
>> Jan 04 06:30:09 neji svn[66343]: DIGEST-MD5 common mech free
>> Jan 04 06:30:09 neji svn[66349]: DIGEST-MD5 common mech free
>> Jan 04 06:30:09 neji svn[66358]: DIGEST-MD5 common mech free
>>
>>
>>
>> *Cyrus <https://cyrus.topicbox.com/latest>* / SASL / see discussions
>> <https://cyrus.topicbox.com/groups/sasl> + participants
>> <https://cyrus.topicbox.com/groups/sasl/members> + delivery options
>> <https://cyrus.topicbox.com/groups/sasl/subscription> Permalink
>> <https://cyrus.topicbox.com/groups/sasl/Tc1bb8688f156d835-M50485f69fa3fd32797add077>
>>

------------------------------------------
Cyrus: SASL
Permalink: 
https://cyrus.topicbox.com/groups/sasl/Tc1bb8688f156d835-M5429dd5cdae0eb6fb3722c21
Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription

Reply via email to