[openssl-dev] [openssl.org #3905] Bug report: segfault while cleaning up in libgost

[bug-reporting0000@cneufeld.ca via RT]

I have compiled and installed OpenSSL v1.0.2b, and find that the 'host'
command segfaults when looking up amazon.ca.  This is with host compiled
from bind-9.9.6-P1.  There is no segfault when running OpenSSL v1.0.2a with
the same 'host' binary.

This is a Linux 64-bit machine, executables and libraries compiled from
sources with no foreign patches.

valgrind reports the following:

==28702== Invalid free() / delete / delete[] / realloc()
==28702==    at 0x4C28BE7: free (vg_replace_malloc.c:473)
==28702==    by 0x64BFFAC: CRYPTO_free (in /usr/lib/engines/libgost.so)
==28702==    by 0x64BAD34: gost_param_free (in /usr/lib/engines/libgost.so)
==28702==    by 0x64BAFB8: gost_engine_destroy (in /usr/lib/engines/libgost.so)
==28702==    by 0x4F3E97B: engine_free_util (in /usr/lib/libcrypto.so.1.0.0)
==28702==    by 0x4F3F103: ENGINE_remove (in /usr/lib/libcrypto.so.1.0.0)
==28702==    by 0x4F3F1D4: engine_list_cleanup (in /usr/lib/libcrypto.so.1.0.0)
==28702==    by 0x4F3E7B5: engine_cleanup_cb_free (in /usr/lib/libcrypto.so.1.0.0)
==28702==    by 0x4F4E0A0: sk_pop_free (in /usr/lib/libcrypto.so.1.0.0)
==28702==    by 0x4F3EABB: ENGINE_cleanup (in /usr/lib/libcrypto.so.1.0.0)
==28702==    by 0x533F19: dst__openssl_destroy (openssl_link.c:266)
==28702==    by 0x4AC2D7: dst_lib_destroy (dst_api.c:261)
==28702==  Address 0x6157d28 is 8 bytes inside a block of size 46 alloc'd
==28702==    at 0x4C27ACD: malloc (vg_replace_malloc.c:296)
==28702==    by 0x54F27D: mem_get (mem.c:796)
==28702==    by 0x54F27D: isc__mem_allocateunlocked (mem.c:1518)
==28702==    by 0x54F7AC: isc___mem_allocate (mem.c:1542)
==28702==    by 0x4E9B287: CRYPTO_malloc (in /usr/lib/libcrypto.so.1.0.0)
==28702==    by 0x4F43757: BUF_strndup (in /usr/lib/libcrypto.so.1.0.0)
==28702==    by 0x64BADE7: gost_set_default_param (in /usr/lib/engines/libgost.so)
==28702==    by 0x4F3FF31: ENGINE_ctrl_cmd_string (in /usr/lib/libcrypto.so.1.0.0)
==28702==    by 0x53745F: dst__opensslgost_init (opensslgost_link.c:433)
==28702==    by 0x4AC51C: dst_lib_init2 (dst_api.c:231)
==28702==    by 0x40E004: setup_libs (dighost.c:1376)
==28702==    by 0x40A087: main (host.c:896)


-- 
 Christopher Neufeld
 Home page:  http://www.cneufeld.ca/neufeld
 "Don't edit reality for the sake of simplicity"

_______________________________________________
openssl-bugs-mod mailing list
openssl-bugs-mod at openssl.org
https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod