Bug 340945 – segfault in libcrypto.so.1.0.0 when build with gmp

• Product: Gentoo Linux
• Status: RESOLVED NEEDINFO

[Description Plopmaster 2010-10-14 09:57:43 UTC]

I recently upgrade to openssl-1.0.0 (from openssl-0.9.8o)
Apache crash at restart : 
apache2[25365]: segfault at 10 ip b66989dd sp bf937610 error 4 in libcrypto.so.1.0.0[b65dc000+141000]
grsec: From 213.41.109.245: Segmentation fault occurred at 00000010 in /usr/sbin/apache2[apache2:25365] uid/euid:0/0 gid/egid:0/0, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0


Reproducible: Always

Steps to Reproduce:
1. install openssl-1.0.0
2. reboot apache
3.




Portage 2.1.8.3 (hardened/linux/x86/10.0, gcc-4.3.4, glibc-2.11.2-r0, 2.6.32.2-xxxx-grs-ipv4-32 i686)
=================================================================
System uname: Linux-2.6.32.2-xxxx-grs-ipv4-32-i686-Intel-R-_Atom-TM-_CPU_330_@_1.60GHz-with-gentoo-1.12.13Timestamp of tree: Wed, 13 Oct 2010 01:00:01 +0000
app-shells/bash:     4.1_p7
dev-lang/python:     2.6.5-r3, 3.1.2-r4
dev-util/cmake:      2.8.1-r2
sys-apps/baselayout: 1.12.13
sys-apps/sandbox:    2.3-r1
sys-devel/autoconf:  2.65-r1
sys-devel/automake:  1.11.1
sys-devel/binutils:  2.20.1-r1
sys-devel/gcc:       4.3.4
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.10sys-devel/make:      3.81-r2
virtual/os-headers:  2.6.30-r1
ACCEPT_KEYWORDS="x86"
ACCEPT_LICENSE="* -@EULA"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=nocona -pipe -fomit-frame-pointer"CHOST="i686-pc-linux-gnu"CONFIG_PROTECT="/etc"CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"CXXFLAGS="-O2 -march=nocona -pipe -fomit-frame-pointer"DISTDIR="/usr/portage/distfiles"FEATURES="assume-digests buildpkg distlocks fixpackages news nodoc noinfo parallel-fetch protect-owned sandbox sfperms strict unmerge-logs unmerge-orphans userfetch"GENTOO_MIRRORS="http://mirror.ovh.net/gentoo-distfiles/ ftp://mirror.ovh.net/gentoo-distfiles/"LANG="fr_FR.UTF-8"LDFLAGS="-Wl,-O1 -Wl,--as-needed"LINGUAS="fr"MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/dev/shm/"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/ovh-overlay"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="acl apache2 bacula-nodir bash-completion berkdb bzip2 cli cracklib crypt cups curl cxx dri exif gd gdbm git gmp gnutls gpm hardened iconv jpeg json ldap lm_sensors mmx modules mudflap mysql ncurses nls nptlonly openmp pam pcre perl pic png pppd python readline reflection session simplexml sni snmp sse sse2 ssl subversion suhosin svg sysfs tcpd threads unicode urandom x86 xml xmlrpc xorg zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1        emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m       maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" APACHE2_MPMS="worker" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="fr" PHP_TARGETS="php-5.2" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="apm ark chips cirrus cyrix dummy fbdev glint i128 i740 intel      mach64 mga neomagic nsc nv r128 radeon rendition s3 s3virge savage      siliconmotion sis sisusb tdfx tga trident tseng v4l vesa via vmware     voodoo" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Samuli Suominen (RETIRED) 2010-10-14 10:12:23 UTC]

Did you do both of,

# revdep-rebuild --library libssl.so.0.9.8
# revdep-rebuild --library libcrypto.so.0.9.8

like the postinst message suggested? Otherwise "half of your libs" are still linked to the old versions, some to the new -> causing segfault...

[Comment 2 Samuli Suominen (RETIRED) 2010-10-14 10:51:38 UTC]

Check Comment #1, and if it's still a problem:

http://www.gentoo.org/proj/en/qa/backtraces.xml

Then reopen with a backtrace