> [rainer-open...@7val.com - Tue Apr 06 10:53:48 2010]:
> 
> 
> On Apr 2, 2010, at 15:30 , Stephen Henson via RT wrote:
> 
> > This looks suspicious:
> >
> >> #3  0x414a0787 in engine_pkey_asn1_meths_free (e=0x39) at
> >>   tb_asnmth.c:165
> >> 165                                        EVP_PKEY_asn1_free(pkm);
> >
> >
> > Not sure where the 0x39 is coming from. In frame#2:
> >
> >> #2  0x414e525a in EVP_PKEY_asn1_free (ameth=0x833fc70) at
> >>   ameth_lib.c:386
> >
> > can you print out the "ameth" structure?
> 
> 
> (gdb) bt
> #0  0x4108a6a5 in free () from /lib/libc.so.6
> #1  0x4141e06e in CRYPTO_free (str=0x39) at mem.c:391
> #2  0x414e525a in EVP_PKEY_asn1_free (ameth=0x833fc80) at
> ameth_lib.c:386
> #3  0x414a0787 in engine_pkey_asn1_meths_free (e=0x39) at
> tb_asnmth.c:165
> #4  0x4149c233 in engine_free_util (e=0x8232f20, locked=0) at
> eng_lib.c:130
> #5  0x4149ca28 in ENGINE_remove (e=0x8232f20) at eng_list.c:187
> #6  0x4149ca9e in engine_list_cleanup () at eng_list.c:88
> #7  0x4149c0cb in engine_cleanup_cb_free (item=0x8233258) at
> eng_lib.c:186
> #8  0x414b0340 in sk_pop_free (st=0x8233188, func=0x4149c0b4
> <engine_cleanup_cb_free>) at stack.c:283
> #9  0x4149c099 in ENGINE_cleanup () at eng_lib.c:193
> #10 0x416db6d1 in Curl_ossl_cleanup () from
> /opt/sevenval/fit90/lib/libcurl.so.4
> #11 0x41159160 in ?? () from /lib/libc.so.6
> #12 0x416f9450 in ?? () from /opt/sevenval/fit90/lib/libcurl.so.4
> #13 0x416ef78c in Curl_ssl_cleanup () from
> /opt/sevenval/fit90/lib/libcurl.so.4
> #14 0x082ebe20 in ?? ()
> #15 0x416f9450 in ?? () from /opt/sevenval/fit90/lib/libcurl.so.4
> #16 0x416e4183 in curl_global_cleanup () from
> /opt/sevenval/fit90/lib/libcurl.so.4
> #17 0x082ebdc8 in ?? ()
> #18 0xb7d8782f in zend_get_module_version (module_name=0x1 <Address
> 0x1 out of bounds>)
>     at /home/build/fit3/build/src/external/php-
> 5.2.13/Zend/zend_API.c:2510
> #19 0xb80765a0 in zend_error_cb () from
> /opt/sevenval/fit90/modules/libphp5.so
> #20 0xb7d8e1b2 in zend_hash_apply_deleter (ht=0x82eaec8, p=0x82d53e8)
>     at /home/build/fit3/build/src/external/php-
> 5.2.13/Zend/zend_hash.c:805
> #21 0xb7d8e43e in zend_hash_graceful_reverse_destroy (ht=0xb80765a0)
>     at /home/build/fit3/build/src/external/php-
> 5.2.13/Zend/zend_hash.c:840
> #22 0xb7d8184f in zend_shutdown () at
> /home/build/fit3/build/src/external/php-5.2.13/Zend/zend.c:814
> #23 0xb7d294fd in php_module_shutdown () at
> /home/build/fit3/build/src/external/php-5.2.13/main/main.c:1948
> #24 0xb7d2959f in php_module_shutdown_wrapper
> (sapi_globals=0xb806c4a0)
> [...]
> (gdb) print *ameth
> $5 = {pkey_id = 1852795252, pkey_base_id = 137624576, pkey_flags = 6,
> pem_str = 0x39 <Address 0x39 out of bounds>,
>   info = 0xa0806974 <Address 0xa0806974 out of bounds>, pub_decode =
> 0xb, pub_encode = 0x833fc9c, pub_cmp = 0x82e2b40,
>   pub_print = 0x833fe00, priv_decode = 0, priv_encode = 0, priv_print
> = 0, pkey_size = 0x6d002a00, pkey_bits = 0x61737365,
>   param_decode = 0x41006567 <f...@plt+23951>, param_encode =
> 0x4155abdf <gost94_param_encode>,
>   param_missing = 0x41558c5d <param_missing_gost94>, param_copy =
> 0x21, param_cmp = 0x200, param_print = 0x8232e78,
>   pkey_free = 0xa, pkey_ctrl = 0xa0806974, old_priv_decode = 0,
> old_priv_encode = 0}
> 

Also it would help if you could put a breakpoint (or debugging printf)
at line 386 of ameth_lib.c (where it crashes). Then see if that is
called more than once.

Steve.
-- 
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to