<div dir="ltr">Hello,<div><br></div><div>I use openldap_2.3.39 to initiate secure LDAP connection (starttls) to external LDAP server. The used openssl version is 1.0.2k.</div><div><br></div><div>While establishing the secure connection from client, i observe the following segmentation fault occasionally (Not always reproducible).</div><div><br></div><div>Any pointers please ?</div><div><br></div><div>"</div><div><div>[Thread debugging using libthread_db enabled]</div><div>Using host libthread_db library "/lib64/libthread_db.so.1".</div><div>Core was generated by `/opt/nsn/pac_bor_qx_e1/bin/border'.</div><div>Program terminated with signal SIGSEGV, Segmentation fault.</div><div>#0  0x00007fd6b8271bd9 in sk_value () from /usr/lib64/libcrypto.so.1.0.0</div><div>(gdb) bt</div><div>#0  0x00007fd6b8271bd9 in sk_value () from /usr/lib64/libcrypto.so.1.0.0</div><div>#1  0x00007fd6b3495516 in ssl23_connect () from /usr/lib64/libssl.so.1.0.0</div><div>#2  0x00007fd6b7d2d6cf in ldap_int_tls_connect (ld=0x7fd6880486d0, conn=0x7fd68802d9e0) at tls.c:805</div><div>#3  0x00007fd6b7d2ece0 in ldap_int_tls_start (ld=0x7fd6880486d0, conn=0x7fd68802d9e0, srv=0x0) at tls.c:1511</div><div>#4  0x00007fd6b7d2f6e9 in ldap_install_tls (ld=0x7fd6880486d0) at tls.c:1935</div><div>#5  0x00007fd6bb46c6c1 in open_connection_as (ldap_host_address=0x7fd68805de90 "10.55.433.1", port=389, client_access=0,</div><div>    user_dn=0x7fd6880543c8 "uid=user1,ou=people,ou=accounts,dc=sasa,dc=test,dc=net",</div><div>    user_pwd=0x7fd6962d3c70 "saaadh45sks", ldap_handle=0x7fd6962d2838, network_timeout=5000, request_id=0x7fd6962d144c,</div><div>    error_string=0x7fd6962d1440, isSecure=2, cacertFile=0x7fd688048bf8 "/etc/certs/cacert.pem",</div><div>    ciphers=0x7fd68805e138 "DHE-RSA-AES256-SHA:AES256-SHA:DHE-RSA-AES128-SHA:AES128-SHA", reqCert=0x7fd6962d2558) at ../src/api.c:1048</div><div>#6  0x00007fd6bb46ca97 in open_secure_connection_starttls_request (ldap_host_address=0x7fd68805de90 "10.55.433.1", port=389,</div><div>    client_access=0, user_dn=0x7fd6880543c8 "uid=user1,ou=people,ou=accounts,dc=sasa,dc=test,dc=net",</div><div>    user_pwd=0x7fd6962d3c70 "saaadh45sks", ldap_handle=0x7fd6962d2838, network_timeout=5000, request_id=0x7fd6962d144c,</div><div>    error_string=0x7fd6962d1440, cacertFile=0x7fd688048bf8 "/etc/certs/cacert.pem",</div><div>    ciphers=0x7fd68805e138 "DHE-RSA-AES256-SHA:AES256-SHA:DHE-RSA-AES128-SHA:AES128-SHA", reqCert=0x7fd6962d2558) at ../src/api.c:1258</div><div>#7  0x00007fd6b9c899c8 in tryConnectExtLdap (host=0x7fd68805de90 "10.55.433.1", port=389,</div><div>    binddn=0x7fd6962d3380 "uid=user1,ou=people,ou=accounts,dc=sasa,dc=test,dc=net", pwd=0x7fd6962d3c70 "saaadh45sks",</div><div>    _extHandle=@0x7fd6962d2838: 0x7fd6880486d0, peopledn=0x7fd6880495b0 "ou=people,ou=accounts,dc=sasa,dc=test,dc=net", secureMode=0,</div><div>    cacertFile=..., ciphers=..., reqCert=5, timeout_ms=5000)</div><div>    at ../../src/acct.cpp:1694</div><div>#8  0x00007fd6b9c88df1 in validate_account (accountName=0x7fd6962d3380 "uid=user1,ou=people,ou=accounts,dc=sasa,dc=test,dc=net",</div><div>    accountPassword=0x7fd6962d3c70 "saaadh45sks") at ../../src/acct.cpp:1623</div><div>#9  0x0000000000479d3a in set_acc (userName=userName@entry=0x7fd6962d3870 "user1",</div><div>    password=password@entry=0x7fd6962d3c70 "saaadh45sks") at ../src/borfunc_cou.c:4066</div><div>#10 0x000000000045217b in _71571_2 (_T=0x42907000) at ../src/bor7qxqx.sdl:600</div><div>#11 0x000000000044fd45 in _s71571_ACTIVE (_T=<optimized out>) at _Sborha7ACTIVE.c:33</div><div>#12 0x00007fd6b6ec8a65 in call_transition (msg=0x7fd6bc0d8948, process=96)</div><div>    at /home/core/threadmain.c:656</div><div>#13 call_transition_with_fatal_sig_catching (thread=<optimized out>, thread@entry=0x25d7d90, process=process@entry=96,</div><div>    msg=msg@entry=0x7fd6bc0d8948) at /home/core/threadmain.c:669</div><div>#14 0x00007fd6b6ec9499 in execute_user_code (msg=0x7fd6bc0d8948, process=96, thread=0x25d7d90)</div><div>    at /home/core/threadmain.c:687</div><div>#15 exec_main_loop (thread=0x25d7d90) at /home/core/threadmain.c:882</div><div>#16 thread_context_main (arg=<optimized out>) at /home/core/threadmain.c:592</div><div>#17 0x00007fd6b64f2f50 in ?? () from /lib64/libc.so.6</div><div>#18 0x0000000000000000 in ?? ()</div><div>(gdb)</div></div><div>"</div><div><br></div><div>Regards,<br>Sanjaya</div></div>