https://bugs.freedesktop.org/show_bug.cgi?id=83937
Priority: medium
Bug ID: 83937
Assignee: [email protected]
Summary: LibreOffice crashes when creating digitally signed PDF
Severity: normal
Classification: Unclassified
OS: All
Reporter: [email protected]
Hardware: Other
Status: UNCONFIRMED
Version: 4.4.0.0.alpha0+ Master
Component: Printing and PDF export
Product: LibreOffice
Created attachment 106380
--> https://bugs.freedesktop.org/attachment.cgi?id=106380&action=edit
valgrind output
This report is a follow up to bug 66701. See there for the steps that lead
here.
When creating a signed PDF (functionality needs to be enabled under
experimental features in Tools->Options->Advanced), LO crashes under certain
conditions. It does not crash, under the same conditions, when signing
the original document XML (File->Digigal Signatures).
The condition that lead to this report:
Create a signed PDF with a signature from an RSA token. The signature is made
with the private key on the token's SigG partition (aka. "qualified
signature").
The crash happens when LO is run directly from the shell or in gdb.
If LO is run in valgrind, it does not crash, but creates a "signed" PDF with an
invalid signature (all zeroes).
How to reproduce:
1) Enable experimental features in LO
2) Use Mozilla or Firefox to configure the token in the NSS store. Make sure
signatures are working (eg. by sending a signed e-mail)
3) Insert RSA token
4) Create document (in Writer, Impress, Calc, ...)
5) Select File->Export as PDF->Digital Signatures
6) Click Select
7) Enter password (if set) for the NSS store and for RSA token, select
certificate from the SigG partition, click OK
8) Fill in remaining fields (certificate password seems not to be necessary),
click Export
9) Select file location
10) Enter the PIN for the RSA token in the popup (this is specific of the
PKCS#11 library for the token and will differ between vendors)
11) LO crashes, sometimes giving output (see attachment 106286), sometimes not.
If run under valgrind, it does not crash but the helper program for the PIN
input segfaults (see valgrind output).
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
