Re: [Perl-openssl-users] Segfault in RSA.xs/check_key(), Crypt::OpenSSL::RSA 0.23

[Ian R. <ia...@re...>]

It turns out that check_key is only valid to call on public keys; the
next release of Crypt::OpenSSL::RSA will document this.  At the same
time, this method (along with a few others) will now only croak instead
of segfaulting when called on a public key.  Jason,  you should feel
free to remove the (commented) check_key code entirely from PublicKey.

Mark, thanks again for the useful bug reports; I'll let you know as soon
as I roll a new release for the RSA module.

  - Ian

On Fri, 2006-11-10 at 17:01 +0100, Mark Martinec wrote:
> While at it, I noticed the following in Mail::DKIM::PublicKey :
> 
> 	# segfaults on my machine
> 	# $cork->check_key or
> 	#	return;
> 
> Uncommenting a call to check_key() in PublicKey.pm and running
> installation test (actually t/verifier.t suffices), it casues
> libcrypto to crash on my FreeBSD 6.1 too, so it seems to be a
> cross-platform problem, being present for several version.
> 
> Here is a backtrace:
> 
> Program received signal SIGSEGV, Segmentation fault.
> 
> (gdb) bt
> #0  0x2836148c in BN_num_bits () from /lib/libcrypto.so.4
> #1  0x282e31c9 in BN_is_prime_fasttest () from /lib/libcrypto.so.4
> #2  0x282e3429 in BN_is_prime () from /lib/libcrypto.so.4
> #3  0x282d5ef9 in RSA_check_key () from /lib/libcrypto.so.4
> #4  0x28398789 in XS_Crypt__OpenSSL__RSA_check_key (cv=0x8491a20)
>   at RSA.xs:447
> #5  0x280f01c0 in Perl_pp_entersub () 
> from /usr/local/lib/perl5/5.8.8/mach/CORE/libperl.so
> #6  0x280e91a5 in Perl_runops_standard () 
> from /usr/local/lib/perl5/5.8.8/mach/CORE/libperl.so
> #7  0x28098b8a in perl_run () 
> from /usr/local/lib/perl5/5.8.8/mach/CORE/libperl.so
> #8  0x08048fe2 in main ()
> 
> Would someone be so kind and see what a problem is about,
> or remove check_key from Crypt::OpenSSL::RSA if it can't be
> repaired.
> 
> Regards
>    Mark
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Perl-openssl-users mailing list
> Per...@li...
> https://lists.sourceforge.net/lists/listinfo/perl-openssl-users