Bug#895035: osc: crashes with memory corruption when using new libssl1.1

2018-05-15 Thread Simon McVittie
Control: tags -1 + patch fixed-upstream On Wed, 02 May 2018 at 17:19:20 +0100, Simon McVittie wrote: > * https://github.com/openSUSE/osc/issues/398 > > """ > - m2crypto 0.29 does no SSL_free(...) (which is fixed in 0.30) > (that's why this bug is not triggered with m2crypto 0.29) > -

Bug#895035: osc: crashes with memory corruption when using new libssl1.1

2018-05-02 Thread Simon McVittie
On Wed, 02 May 2018 at 18:34:35 +0200, Kurt Roeckx wrote: > On Wed, May 02, 2018 at 05:19:20PM +0100, Simon McVittie wrote: > > * https://github.com/openssl/openssl/pull/5967 > > Is it urgunt to fix this in testing/unstable? Probably not, unless it makes other packages regress? The upstream osc

Bug#895035: [Pkg-openssl-devel] Bug#895035: osc: crashes with memory corruption when using new libssl1.1

2018-05-02 Thread Kurt Roeckx
On Wed, May 02, 2018 at 07:26:02PM +0200, Sebastian Andrzej Siewior wrote: > On 2018-05-02 18:34:35 [+0200], Kurt Roeckx wrote: > > On Wed, May 02, 2018 at 05:19:20PM +0100, Simon McVittie wrote: > > > * https://github.com/openssl/openssl/pull/5967 > > > > > > """ > > > Commit d316cdc

Bug#895035: [Pkg-openssl-devel] Bug#895035: osc: crashes with memory corruption when using new libssl1.1

2018-05-02 Thread Sebastian Andrzej Siewior
On 2018-05-02 18:34:35 [+0200], Kurt Roeckx wrote: > On Wed, May 02, 2018 at 05:19:20PM +0100, Simon McVittie wrote: > > * https://github.com/openssl/openssl/pull/5967 > > > > """ > > Commit d316cdc introduced some extra > > checks into the session-cache update procedure, intended to

Bug#895035: [Pkg-openssl-devel] Bug#895035: osc: crashes with memory corruption when using new libssl1.1

2018-05-02 Thread Kurt Roeckx
On Wed, May 02, 2018 at 05:19:20PM +0100, Simon McVittie wrote: > * https://github.com/openssl/openssl/pull/5967 > > """ > Commit d316cdc introduced some extra > checks into the session-cache update procedure, intended to prevent > the caching of sessions whose resumption would lead to a

Bug#895035: osc: crashes with memory corruption when using new libssl1.1

2018-05-02 Thread Simon McVittie
On Sat, 28 Apr 2018 at 13:03:14 +0200, Harald Welte wrote: > Package: osc > Version: 0.162.1-1 > Followup-For: Bug #895035 > > I also see "double free or corruption" 100% reproducible when using osc on > unstable > for the past few weeks I tried rebuilding older openssl versions, and the

Bug#895035: osc: crashes with memory corruption when using new libssl1.1

2018-04-06 Thread Kurt Roeckx
On Fri, Apr 06, 2018 at 07:54:44PM +0100, Simon McVittie wrote: > On Fri, 06 Apr 2018 at 19:44:18 +0200, Kurt Roeckx wrote: > > On Fri, Apr 06, 2018 at 01:58:03PM +0100, Simon McVittie wrote: > > > This is probably a bug in libssl1.1 or in python-m2crypto, but I'm > > > reporting it against osc

Bug#895035: [Pkg-openssl-devel] Bug#895035: osc: crashes with memory corruption when using new libssl1.1

2018-04-06 Thread Kurt Roeckx
On Fri, Apr 06, 2018 at 01:58:03PM +0100, Simon McVittie wrote: > Package: osc > Version: 0.162.1-1 > Severity: grave > Justification: osc tool becomes mostly unusable > > This is probably a bug in libssl1.1 or in python-m2crypto, but I'm > reporting it against osc for now, because that's the

Bug#895035: osc: crashes with memory corruption when using new libssl1.1

2018-04-06 Thread Simon McVittie
Package: osc Version: 0.162.1-1 Severity: grave Justification: osc tool becomes mostly unusable This is probably a bug in libssl1.1 or in python-m2crypto, but I'm reporting it against osc for now, because that's the only place I know how to reproduce it at the moment. X-Debbugs-Cc'd to the