polarssl segfaults in certain functions(test with polarssl_ssl_server2 i.e.)

[Edgaras]

Linux raspberrypi 3.6.11+ #371 PREEMPT Thu Feb 7 16:31:35 GMT 2013 armv6l GNU/Linux

$ polarssl_ssl_server2
  . Seeding the random number generator... ok
  . Loading the CA root certificate ... ok (0 skipped)
  . Loading the server cert. and key...*** glibc detected *** polarssl_ssl_server2: free(): invalid next size (normal): 0x017807d8 ***
Aborted

$ dpkg -s libc6 | grep ^Version
Version: 2.13-38+rpi2
$ dpkg -s libpolarssl0 | grep ^Version
Version: 1.1.4-2

I needed to compile some certain package that uses polarssl, I was unsuccesfull with running it, nether with polarssl from raspbian repositories nor with the one compiled from source frome their website. But I managed to dig some stuff up when I compiled polarssl with debug information. In that case the error was stemming from bignum.c file in polarssl, it is using bunch of macros that try to use architecture dependent assembly. And my guess would be that it fails to use correct one(or to fallback to general C implementation, if non of them match pi's assembly). However I cannot guarante that polarssl_ssl_server2 crashes for same reason.

I would guess that the simples fix would be to make polarssl fallback to generic C implementations of mentioned functions (and possibly others that I did not find).

[peter green (plugwash)]

Have you tried to get in touch with polarssl upstream?

[Edgaras (devoas)]

No I haven't. I'll probably do that in some time. Maybe I'll manage to compile working version myself, though even id I do it would be good to konw for upstreem. Though maybe I'm the only one with such bug, it would be interesting to know if someone else can reproduce it.

[Diederik (didi-debian)]

What's the current status of this issue?

[Diederik (didi-debian)]

According to https://packages.debian.org/search?keywords=libpolarssl0 the version in *SQUEEZE* is 1.2.9-1~deb6u1 which seems to be a LOT newer then what you have! ...

[Diederik (didi-debian)]

And the version of libc6 in *WHEEZY* is 2.13-38+deb7u8 ...

Using a version of libpolarssl0 which is older then squeeze and a libc6 which looks to be from wheezy is asking for problems.
Unless I'm missing something.

[Launchpad Janitor (janitor)]

[Expired for Raspbian because there has been no activity for 60 days.]