[openssl-users] CTX_free crash

[dE]

On 04/25/15 15:34, dE wrote:
> On 04/21/15 15:22, dE wrote:
>> On 04/20/15 00:10, Salz, Rich wrote:
>>>> Sometimes, the program crashes when doing an SSL_CTX_free; before the
>>>> crash, ctx is an invalid pointer, that's why I can get a valid 
>>>> value from
>>>> SSL_CTX_get_max_cert_list (ctx), so it's not a double free problem.
>>> You mean it's a VALID pointer?
>>>
>>> We'll need a more detailed backtrace.
>>> _______________________________________________
>>> openssl-users mailing list
>>> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>>
>> Relevant parts of the BT
>>
>> #0  0x00007ffff54bde97 in raise () from /lib64/libc.so.6
>> #1  0x00007ffff54bf208 in abort () from /lib64/libc.so.6
>> #2  0x00007ffff54feea0 in ?? () from /lib64/libc.so.6
>> #3  0x00007ffff55048be in ?? () from /lib64/libc.so.6
>> #4  0x00007ffff55050ab in ?? () from /lib64/libc.so.6
>> #5  0x00007ffff6827f7c in CRYPTO_free (str=0x8fbfe0) at mem.c:401
>> #6  0x00007ffff67e99a0 in X509_VERIFY_PARAM_free (param=0x8fbfe0) at 
>> x509_vpm.c:102
>> #7  0x00007ffff6d5302a in SSL_CTX_free (a=0x8fe090) at ssl_lib.c:1944
>
> libc BT needed also?

Ok, more detailed BT

#0  0x00007ffff6d5270d in ssl_session_hash (a=0x0) at ssl_lib.c:1674
#1  0x00007ffff6d527db in ssl_session_LHASH_HASH (arg=0x0) at ssl_lib.c:1699
#2  0x00007ffff6795daf in getrn (lh=0x8fcd80, data=0x0, 
rhash=0x7fffd67eb908) at lhash.c:411
#3  0x00007ffff679571a in lh_delete (lh=0x8fcd80, data=0x0) at lhash.c:224
#4  0x00007ffff6d58d33 in timeout_doall_arg (s=0x0, p=0x7fffd67eba40) at 
ssl_sess.c:988
#5  0x00007ffff6d58dc6 in timeout_LHASH_DOALL_ARG (arg1=0x0, 
arg2=0x7fffd67eba40) at ssl_sess.c:997
#6  0x00007ffff6795942 in doall_util_fn (lh=0x8fcd80, use_arg=1, func=0x0,
     func_arg=0x7ffff6d58d93 <timeout_LHASH_DOALL_ARG>, 
arg=0x7fffd67eba40) at lhash.c:292
#7  0x00007ffff67959d9 in lh_doall_arg (lh=0x8fcd80, func=0x7ffff6d58d93 
<timeout_LHASH_DOALL_ARG>, arg=0x7fffd67eba40)
     at lhash.c:307
#8  0x00007ffff6d58e56 in SSL_CTX_flush_sessions (s=0x8fcec0, t=0) at 
ssl_sess.c:1011
#9  0x00007ffff6d53048 in SSL_CTX_free (a=0x8fcec0) at ssl_lib.c:1956