crash in libsofthsm2 on armhf after time_t transition

Bug #2059340 reported by Steve Langasek
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
softhsm2 (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

fixed one time_t bug in this library already, now there's another.

Found via the libp11 autopkgtests.

reproducer:

OPENSSL_CONF=/tmp/tmp.AHeazS4ed8/ssl.cnf openssl req -engine pkcs11 -new -key 'pkcs11:model=SoftHSM%20v2;object=test-key;pin-value=1234' -keyform engine -out /tmp/tmp.AHeazS4ed8/req.pem -text -x509 -subj /CN=libp11

Snippet of gdb output:

Program received signal SIGSEGV, Segmentation fault.
Downloading source file /usr/src/softhsm2-2.6.1-2.2ubuntu1/src/lib/slot_mgr/SlotManager.cpp
SlotManager::getSlot (this=0x0, slotID=slotID@entry=1150801720)
    at SlotManager.cpp:174
174 return slots.at(slotID);
(gdb) bt
#0 SlotManager::getSlot (this=0x0, slotID=slotID@entry=1150801720)
    at SlotManager.cpp:174
#1 0xf7b61b3c in SoftHSM::C_CloseAllSessions (this=0x4b6020,
    slotID=slotID@entry=1150801720) at SoftHSM.cpp:1386
#2 0xf7b4a522 in C_CloseAllSessions (slotID=1150801720) at main.cpp:347
#3 0xf7bc7ffe in pkcs11_slot_unref (slot=slot@entry=0x4d7610)
    at p11_slot.c:433
<snip>

'slotManager' is NULL.

Tags: time-t

Related branches

CVE References

Steve Langasek (vorlon)
tags: added: time-t
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package softhsm2 - 2.6.1-2.2ubuntu3

---------------
softhsm2 (2.6.1-2.2ubuntu3) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- William Grant <email address hidden> Mon, 01 Apr 2024 15:47:06 +1100

Changed in softhsm2 (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.