ssldump segfault

[Jean-Paul Calderone]

Binary package hint: ssldump

ssldump will often segfault while interpreting valid ssl data captured from the network.

Here are reproduction instructions for one such crash.

The attached server.pem contains a private key and self-signed certificate.
The attached echoserv_ssl.py is a Python program (requires Twisted - should be fine with 8.2) which runs an SSL server.
The attached netkit-telnet-ssl.patch is a patch to the netkit-telnet-ssl source package to cause it to use TLSv1 instead of SSLv2.

Put server.pem and echoserv_ssl.py in the same directory and run echoserv_ssl.py. It will bind to port 8000. Patch netkit-telnet-ssl and build it. Use the resulting telnet executable to run this command from the directory containing server.pem:

telnet -z ssl,cert=server.pem,key=server.pem,verify=0x00,verbose localhost 8000

The connection will not manage to get set up completely (I haven't debugged that yet). If you do this while ssldump is running (eg ssldump -i lo), ssldump will segfault after reporting some text.

Also attached is the output I see from the telnet command, from ssldump, and a tcpdump capture of the traffic which happens on my system during this interaction.

[Jean-Paul Calderone (exarkun)]

Also,

ssldump:
  Installed: 0.9b3-2.2
  Candidate: 0.9b3-2.2

This is all on Hardy.