package: libgssapi-krb5-2
severity: grave
version: 1.7
justification: breaks unrelated packages


During process exit, the gss-api library dlcloses each plugin it has
loaded.
Unfortunately, many of those plugins have a link-time dependency on the
gss-api library.
This means there is a cycle in the load-time dependency graph. ld.so
breaks this cycle somehow.
It tends to unload the plugins before it unloads the gss-api library.

Unfortunately, by the time that the gss library dlcloses the plugin, the
inited element in the linker structure has already been set to 0.
This triggers an assertion in dlclose, crashing the process.
So, on a system with gss-api plugins enabled, most if not all gss-api
using processes will crash on exit.
This is surprisingly less catastrophic than you might exepect, but is
still incredibly bad and needs fixing.

--Sam


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to