Status: Untriaged
Owner: ----
CC: [email protected],  [email protected],  [email protected],   
[email protected]
Labels: Type-Bug Pri-2 OS-Mac Area-BrowserBackend

New issue 26254 by [email protected]: Crash in certificate code
http://code.google.com/p/chromium/issues/detail?id=26254

- was just surfing around, had gmail and bug site open

crash:

Thread 16 Crashed:
0   libSystem.B.dylib                   0x97384338 tiny_malloc_from_free_list + 
 
62
1   libSystem.B.dylib                   0x9737d1cd szone_malloc + 180
2   libSystem.B.dylib                   0x9737d0d8 malloc_zone_malloc + 81
3   libSystem.B.dylib                   0x9737d06c malloc + 55
4   com.apple.security                  0x903e50ef  
DefaultAllocator::malloc(unsigned long) + 29
5   com.apple.security                  0x903dfc00  
Security::CssmAllocatorMemoryFunctions::relayMalloc(unsigned long, void*) +  
24
6   com.apple.security                  0x903dfdac  
Security::CssmMemoryFunctions::malloc(unsigned long) const + 36
7   com.apple.security                  0x903dfc85  
Security::CssmMemoryFunctionsAllocator::malloc(unsigned long) + 27
8   com.apple.security                  0x903319b2  
Attachment::upcallMalloc(long, unsigned int) + 44
9   com.apple.security                  0x903b3e2b  
Security::PluginSession::malloc(unsigned long) + 39
10  com.apple.security                  0x90405f0b SecNssEncodeItem(void 
const*,  
SecAsn1Template_struct const*, Security::Allocator&, cssm_data&) + 101
11  com.apple.security                  0x90405f7d SecNssEncodeItemOdata(void  
const*, SecAsn1Template_struct const*, Security::CssmOwnedData&) + 47
12  com.apple.security                  0x9035bef8 getField_normRDN_NSS + 158
13  com.apple.security                  0x90358760  
getFieldSubjectNorm(DecodedItem&, unsigned int, unsigned int&,  
Security::CssmOwnedData&) + 92
14  com.apple.security                  0x9035916f  
DecodedCert::getCertFieldData(Security::CssmData const&, unsigned int,  
unsigned int&, Security::CssmOwnedData&) + 69
15  com.apple.security                  0x9036176c  
AppleX509CLSession::CertGetFirstCachedFieldValue(long, Security::CssmData  
const&, unsigned int&, cssm_data*&) + 102
16  com.apple.security                  0x903b5b33  
cssm_CertGetFirstCachedFieldValue(long, long, cssm_data const*, long*,  
unsigned int*, cssm_data**) + 83
17  com.apple.security                  0x9033cff3  
CSSM_CL_CertGetFirstCachedFieldValue + 79
18  com.apple.security                  0x9034cc02  
TPClItemInfo::fetchField(cssm_data const*, cssm_data**) + 76
19  com.apple.security                  0x9034d80f TPCertInfo::TPCertInfo(long, 
 
long, cssm_data const*, TPItemCopy, char const*) + 245
20  com.apple.security                  0x9034d9d3  
TPCertGroup::TPCertGroup(cssm_certgroup const&, long, long,  
Security::Allocator&, char const*, bool, TPGroupOwner) + 249
21  com.apple.security                  0x9034c0fa  
AppleTPSession::CertGroupVerify(long, long, cssm_certgroup const&,  
cssm_tp_verify_context const*, cssm_tp_verify_context_result*) +
476
22  com.apple.security                  0x903bb7bb cssm_CertGroupVerify(long,  
long, long, cssm_certgroup const*, cssm_tp_verify_context const*,  
cssm_tp_verify_context_result*) + 83
23  com.apple.security                  0x9033fd8d CSSM_TP_CertGroupVerify + 79
24  com.apple.security                  0x903c58eb  
Security::CssmClient::TPImpl::certGroupVerify(Security::CertGroup const&,  
Security::TPVerifyContext const&, Security::TPVerifyResult*) +
147
25  com.apple.security                  0x9031ca05  
Security::KeychainCore::Trust::evaluate() + 1433
26  com.apple.security                  0x903123cc SecTrustEvaluate + 90
27  ...chromium.Chromium.framework      0x02b1dfd2 ChromeMain + 8169666
28  ...chromium.Chromium.framework      0x02ae9c12 ChromeMain + 7955714
29  ...chromium.Chromium.framework      0x0289d5b7 ChromeMain + 5545639
30  com.apple.Foundation                0x938d97e4 -[NSOperation start] + 772
31  com.apple.Foundation                0x938d94d2 __runop + 34
32  libSystem.B.dylib                   0x973e540f _pthread_wqthread + 331
33  libSystem.B.dylib                   0x973e52c2 start_wqthread + 30

I know this is all apple code, but I also know we recently re-wrote our SSL  
handling, so this could be a garbage-in, garbage-out deal and we crashed  
the browser.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to