[openssl-dev] [openssl.org #3747] Bug Report - Segmentation fault thrown from engine_unlocked_finish()

[ijing06@gmail.com via RT]

Hi,

I ran into an issue when testing openssl 1.0.1h with SQL ODBC Driver 11 on
Linux Redhat 5.

GDB shows the segmentation fault occurs at -

Program terminated with signal 11, Segmentation fault.
#0  0x00002ae14175e367 in engine_unlocked_finish (e=0x2ae14177f5ca,
    unlock_for_handlers=1) at eng_init.c:101
101         e->funct_ref--;
(gdb) p e->funct_ref
$1 = -2092374647

When testing with SQL ODBC Driver w/o openssl lib, it works fine.

I also tried the same test with latest version of openssl (1.0.2 & 1.0.1l)
and both gave the same result (seg fault).

The source code -

crypto/engine/eng_init.c

shows it unconditionally reduces the reference count at line 101:

e->funct_ref--;

Is this intentional?  Can you provide a feedback?

Thanks.