> On Wed, Jul 08, 2009 at 01:46:55PM +0200, Vogler Hartmut wrote: > > Package: libssl0.9.8 > > Version: 0.9.8g-15+lenny1 > > Severity: grave > > File: libssl > > > The problem can be reproduce in a standard Debian (Lenny) enviroment: > > Can you please provide some info on how to reproduce this, and why you think this is a bug in libssl0.9.8? > > Do you for instance have a backtrace of that core dump? > > Note that I do not have oracle, so I doubt that I can reproduce this. > > > Kurt
I have used "reportbug" to send the bug description, but it seems, that reportbug has send my description to /dev/null :-) Ok, the problem is reproduceable with perl in cobination with DBD::Oracle and any SSL Application based on Net::SSL. I have already send the problem to DBD::Oracle bug list in a very detailed form http://rt.cpan.org/Public/Bug/Display.html?id=47042 A very simple test script is ... -------------------------------------------- #!/usr/bin/perl use strict; use DBI; use LWP::UserAgent; sub tst1 { my $ADDR='https://darwin.telekom.de/darwin/auth/base/menu/root'; my $ua=LWP::UserAgent->new(); my $request = HTTP::Request->new(GET => $ADDR); my $response = $ua->request($request) or warn "cannot request"; } printf("DEBUG: before DBI connect\n"); my $db=DBI->connect("dbi:Oracle:myoracledb","MYACCOUNT","?????"); printf("DEBUG: before function tst1()\n"); tst1(); printf("DEBUG: after function tst1()\n"); -------------------------------------------- ... witch opens a oracle database connection via DBD::Oracle and then make any ssl connection. If you do this, you will get a core dump or any other perl error. With the LWP::Useragent (as descriped in the script) i get "heavy" perl error: *** glibc detected *** /usr/bin/perl: free(): invalid pointer: 0xb7f76190 *** ======= Backtrace: ========= /lib/libc.so.6[0xb7ea5845] /lib/libc.so.6(cfree+0x9c)[0xb7ea76ec] ... (the rest is listed in http://rt.cpan.org/Public/Bug/Display.html?id=47042 ). I looks to me, there is any bug while freeing SSL connections in the openssl library. Curiously the problem only happens in combination with DBD::Oracle - but this can be founded on the heavy memory usage of oracle (loading of 200MB shared librarys can bring deep hidden bugs to the daylight) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org