Re: sshd segfaults after applying OpenBSD 5.7 errata 9

2015-06-13 Thread Jacob Vosmaer
2015-06-13 21:42 GMT+02:00 Jacob Vosmaer :

>
>> I suppose I could empty /usr/src, unpack the 5.7 tarballs, apply errata 9
> and see what happens. That way CVS is not in the picture.
>
OK, looks like this was CVS user error. Removing /usr/src, untarring the
5.7 source tarballs, and applying errata 9 worked fine this time.

My lesson is to stay the hell away from cvs. :)

Now how do I close this bug I sent to bugs@?



Re: sshd segfaults after applying OpenBSD 5.7 errata 9

2015-06-13 Thread Jacob Vosmaer
I discovered sendbug and submitted this issue to b...@openbsd.org.

2015-06-13 19:51 GMT+02:00 Jacob Vosmaer :

> Hi,
>
> I pulled in the latest changes into /usr/src with 'cvs -q up -rOPENBSD_5_7
> -Pd' and recompiled libcrypto and smtpd. After a reboot I got in trouble
> because a number of daemons were segfaulting: sshd, smtpd, unbound. Luckily
> I have a serial console to get into my server (a Soekris net6501-50).
>
> OpenBSD 5.7 (GENERIC.MP) #881: Sun Mar  8 11:04:17 MDT 2015
> dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
>
> I googled a bit and saw somebody using gdb to get a stack trace. This is
> what I saw for sshd:
>
> $ sudo gdb -q --args /usr/sbin/sshd
> (no debugging symbols found)
> (gdb) run
> Starting program: /usr/sbin/sshd
> (no debugging symbols found)
>
> Program received signal SIGSEGV, Segmentation fault.
> strcmp () at /usr/src/lib/libc/arch/amd64/string/strcmp.S:44
> 44  movq8(%rdi),%rax
> Current language:  auto; currently asm
> (gdb) bt
> #0  strcmp () at /usr/src/lib/libc/arch/amd64/string/strcmp.S:44
> #1  0x1113b674f750 in getrn (lh=0x1113cd06e500, data=0x111363fcc340,
> rhash=Variable "rhash" is not available.
>
> ) at
> /usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/lhash/lhash.c:419
> #2  0x1113b674fad6 in lh_insert (lh=0x1113cd06e500,
> data=0x111363fcc340)
> at
> /usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/lhash/lhash.c:192
> #3  0x1113b66f143d in OBJ_NAME_add (name=0x0, type=2,
> data=0x1113b6991d40 "�\003")
> at
> /usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/objects/o_names.c:184
> #4  0x1113b668400a in OpenSSL_add_all_ciphers ()
> at
> /usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/evp/c_all.c:222
> #5  0x1113b668403e in OPENSSL_add_all_algorithms_noconf ()
> at
> /usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/evp/c_all.c:293
> #6  0x1110cf30dc67 in sshd_hostkey_sign () from /usr/sbin/sshd
> #7  0x1110cf30baf1 in ?? () from /usr/sbin/sshd
> #8  0x in ?? ()
> (gdb)
>
> I tried the same with smtpd and unbound, both failed doing a strcmp in
> lhash.c.
>
> I tried recompiling all of ssh but it did not fix the problem.
>
> I am now trying to revert errata 9 and recompile libcrypto to see if I get
> a usable system back. (This is a fun breakage, curl is no longer working
> for instance.) If think I will move o to bsd.rd.
>
> In the hubbub around OpenSSL 1.0.1n I read there was a problem with ABI
> breakage, leading to an 1.0.1o release. I wonder if 5.7 errata 9 incurred
> the ABI breakage of the snarfed OpenSSL 1.0.1n release.
>
> Cheers,
>
> Jacob Vosmaer



sshd segfaults after applying OpenBSD 5.7 errata 9

2015-06-13 Thread Jacob Vosmaer
Hi,

I pulled in the latest changes into /usr/src with 'cvs -q up -rOPENBSD_5_7
-Pd' and recompiled libcrypto and smtpd. After a reboot I got in trouble
because a number of daemons were segfaulting: sshd, smtpd, unbound. Luckily
I have a serial console to get into my server (a Soekris net6501-50).

OpenBSD 5.7 (GENERIC.MP) #881: Sun Mar  8 11:04:17 MDT 2015
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

I googled a bit and saw somebody using gdb to get a stack trace. This is
what I saw for sshd:

$ sudo gdb -q --args /usr/sbin/sshd
(no debugging symbols found)
(gdb) run
Starting program: /usr/sbin/sshd
(no debugging symbols found)

Program received signal SIGSEGV, Segmentation fault.
strcmp () at /usr/src/lib/libc/arch/amd64/string/strcmp.S:44
44  movq8(%rdi),%rax
Current language:  auto; currently asm
(gdb) bt
#0  strcmp () at /usr/src/lib/libc/arch/amd64/string/strcmp.S:44
#1  0x1113b674f750 in getrn (lh=0x1113cd06e500, data=0x111363fcc340,
rhash=Variable "rhash" is not available.

) at /usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/lhash/lhash.c:419
#2  0x1113b674fad6 in lh_insert (lh=0x1113cd06e500, data=0x111363fcc340)
at
/usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/lhash/lhash.c:192
#3  0x1113b66f143d in OBJ_NAME_add (name=0x0, type=2,
data=0x1113b6991d40 "�\003")
at
/usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/objects/o_names.c:184
#4  0x1113b668400a in OpenSSL_add_all_ciphers ()
at /usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/evp/c_all.c:222
#5  0x1113b668403e in OPENSSL_add_all_algorithms_noconf ()
at /usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/evp/c_all.c:293
#6  0x1110cf30dc67 in sshd_hostkey_sign () from /usr/sbin/sshd
#7  0x1110cf30baf1 in ?? () from /usr/sbin/sshd
#8  0x in ?? ()
(gdb)

I tried the same with smtpd and unbound, both failed doing a strcmp in
lhash.c.

I tried recompiling all of ssh but it did not fix the problem.

I am now trying to revert errata 9 and recompile libcrypto to see if I get
a usable system back. (This is a fun breakage, curl is no longer working
for instance.) If think I will move o to bsd.rd.

In the hubbub around OpenSSL 1.0.1n I read there was a problem with ABI
breakage, leading to an 1.0.1o release. I wonder if 5.7 errata 9 incurred
the ABI breakage of the snarfed OpenSSL 1.0.1n release.

Cheers,

Jacob Vosmaer