<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
Thanks Viktor,</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<span style="color:rgb(36, 36, 36);font-family:"Microsoft Yahei UI", Verdana, Simsun, "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;font-size:14.6667px;background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted0 ContentPasted1">The
crashed application doesn't call SSL_get0_verified_chain(). I'm not sure why the heap verified_chain is corrupted.</span><br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<span style="color:rgb(36, 36, 36);font-family:"Microsoft Yahei UI", Verdana, Simsun, "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;font-size:14.6667px;background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted0 ContentPasted1"><br>
</span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<span style="color:rgb(36, 36, 36);font-family:"Microsoft Yahei UI", Verdana, Simsun, "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;font-size:14.6667px;background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted0 ContentPasted1">Besides,
for the X509 object, if I call X509_free() twice no coredump is generated which is as expected. So my issue is still related with verified_chain heap.</span></div>
<div id="appendonsend"></div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>发件人:</b> openssl-users <openssl-users-bounces@openssl.org> 代表 openssl-users-request@openssl.org <openssl-users-request@openssl.org><br>
<b>发送时间:</b> 2023年3月3日 20:00<br>
<b>收件人:</b> openssl-users@openssl.org <openssl-users@openssl.org><br>
<b>主题:</b> openssl-users Digest, Vol 100, Issue 9</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="PlainText">Send openssl-users mailing list submissions to<br>
openssl-users@openssl.org<br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" data-auth="NotApplicable">
https://mta.openssl.org/mailman/listinfo/openssl-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
openssl-users-request@openssl.org<br>
<br>
You can reach the person managing the list at<br>
openssl-users-owner@openssl.org<br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of openssl-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: [Openssl 1.1.1n] application core dump while calling<br>
sk_X509_pop_free(s->verified_chain, X509_free); (Viktor Dukhovni)<br>
2. OpenSSL 3.0.7 + Kernel Crypto API (Hareesh Das Ulleri)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 3 Mar 2023 00:49:26 -0500<br>
From: Viktor Dukhovni <openssl-users@dukhovni.org><br>
To: openssl-users@openssl.org<br>
Subject: Re: [Openssl 1.1.1n] application core dump while calling<br>
sk_X509_pop_free(s->verified_chain, X509_free);<br>
Message-ID: <ZAGKZhl1tA1O0c//@straasha.imrryr.org><br>
Content-Type: text/plain; charset=us-ascii<br>
<br>
On Fri, Mar 03, 2023 at 02:21:43AM +0000, Ma Zhenhua wrote:<br>
<br>
> My application core dumps twice in the same procedure while pop and<br>
> free s->verified_chain. I don't find possible cause until now. Any<br>
> constructive advice is highly appreciated.<br>
<br>
You've corrupted the heap prior to that call, or, ignoring the<br>
documentation, or previously freed the verified chain, which is owned by<br>
SSL handle, and must not be freed by the application.<br>
<br>
See SSL_get0_verified_chain(3). OpenSSL's handling of this object is<br>
correct. You'll have to figure out where you went wrong.<br>
<br>
-- <br>
Viktor.<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Fri, 3 Mar 2023 08:47:59 +0000<br>
From: Hareesh Das Ulleri <hareesh.ulleri@ovt.com><br>
To: "openssl-users@openssl.org" <openssl-users@openssl.org><br>
Subject: OpenSSL 3.0.7 + Kernel Crypto API<br>
Message-ID: <07164a1ea09c45978876d04fadebcc4b@ovtmail2.ovt.com><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
Hello OpenSSL users,<br>
<br>
Is it possible to integrate linux kernel 5.10 Crypto API module with OpenSSL 3.0.7 or above versions. If possible request to suggest any doc to start with if available.<br>
<br>
My requirement is to integrate a HW Cipher implementation (with or without OpenSSL custom provider). Is this possible ?<br>
<br>
Please let me know if anyone tried or knows this !<br>
<br>
Thanks,<br>
Hareesh<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://mta.openssl.org/pipermail/openssl-users/attachments/20230303/d354dc1b/attachment-0001.htm" data-auth="NotApplicable">https://mta.openssl.org/pipermail/openssl-users/attachments/20230303/d354dc1b/attachment-0001.htm</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
openssl-users mailing list<br>
openssl-users@openssl.org<br>
<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" data-auth="NotApplicable">https://mta.openssl.org/mailman/listinfo/openssl-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of openssl-users Digest, Vol 100, Issue 9<br>
*********************************************<br>
</div>
</span></font></div>
</body>
</html>