** Description changed: + + [Impact] + + * Impossible to use multiple different token types in opencryptoki. + + [Test Case] + + * Ensure one has a system with multiple tokens configured. E.g. s390x with ICA and SoftTok. + * Execute $ pkcsconf -t + * The model for two tokens should be different e.g.: + $ pkcsconf -t | grep Model + Model: IBM ICA + Model: IBM SoftTok + + On broken systems, whichever token is loaded first is repeated for all + subsequent tokens. + + [Regression Potential] + + * No code changes are done. It appears that the code relies on + dynamically loading and rebinding functions, yet that is not possible to + do with distribution default linker flag -Wl,-Bsymbolic-functions. + Recompiling the software with this flag stripped makes the software + operate as expected. + + [Other Info] + + * The fix for this issue is similar to what has been employed previously. E.g. in https://bugs.launchpad.net/ubuntu/+source/xfe/+bug/644645 + + + [Original Bug report] + Running Ubuntu 17.10 on a zVM s390x environment with opencryptoki 3.7 installed via apt, the command pkcsconf -t gives a segmentation fault. We did some tests (all on a zVM): 1. On a debian testing installation: the opencryptoki 3.7.0+dfsg-4 package works as expected. 2. On a ubuntu 17.04 installation: the opencryptoki (3.6.2+dfsg-1 that is available on the repo) package works as expected. 3. On a ubuntu 17.10 installation: opencryptoki 3.7.0+dfsg-4 gives segmentation fault (pkcsconf -t) 4. On a ubuntu 17.10 installation: downloading building opencryptoki 3.7.0 from Github manually and installing it, works as expected. 5. On a ubuntu 17.10 installation: installing opencryptoki 3.7.0+dfsg-4 package from debian testing repository, work as expected. It seems that opencryptoki 3.7.0+dfsg-4 package from Ubuntu was built differently compared to Debian. We believe that the build was done incorrectly and is causing the pkcsconf -t command to segfault. Could you guys verify how the package is being built and compare it to debian's opencryptoki package? - Machine Type = zVM s390x - + Machine Type = zVM s390x + ---Steps to Reproduce--- - #apt-get install opencryptoki + #apt-get install opencryptoki #pkcsconf -t Segmentation fault - + ---Patches Installed--- na - + ---uname output--- Linux 4.13.0-16-generic #19-Ubuntu SMP Wed Oct 11 18:33:05 UTC 2017 s390x s390x s390x GNU/Linux - + ---Debugger--- A debugger is not configured - - - Userspace tool common name: opencryptoki - Userspace rpm: opencryptoki_3.7.0+dfsg-4 - - The userspace tool has the following bit modes: 64-bit + Userspace tool common name: opencryptoki - Userspace tool obtained from project website: na - + Userspace rpm: opencryptoki_3.7.0+dfsg-4 + + The userspace tool has the following bit modes: 64-bit + + Userspace tool obtained from project website: na + -Attach ltrace and strace of userspace application.
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1725250 Title: Ubuntu 17.10 - opencryptoki 3.7.0 segmentation fault on pkcsconf -t To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1725250/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
