modutil et. al. segfault using PKCS11 api lib

[Silvan Marco Fin]

Binary package hint: libopencryptoki

Description of actions which leads to segfault:

installation of trousers, tpm-tools, libnss3-tools, opencryptoki and libopencryptoki0

# only softtoken (#0) is available after installation.
sudo su -
pkcsconf -I -c 0
pkcsconf -c 0 -P
pkcsconf -c 0 -u
# so far everything works fine, the softtoken is now configured.
exit # back to normal user:

Now the following happens:

macfiron@untainted:~$ modutil -dbdir /home/macfiron/.evolution -add "mysoft" -libfile /usr/lib/opencryptoki/libopencryptoki.so.0.0.0

WARNING: Performing this operation while the browser is running could cause
corruption of your security databases. If the browser is currently running,
you should exit browser before continuing this operation. Type
'q <enter>' to abort, or <enter> to continue:

Segmentation fault

When installing dbg-versions of used programs and libraries, the erros is traced to /usr/lib/opencryptoki/libopencryptoki.so.0.0.0. (api_interface.c:3330)

Since I'm not sure what exactly leads to this behavior, I initially generated the bug report by quoting "libnss3-tools", perhaps opencryptoki would have been more accurate.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: libnss3-tools 3.12.6-0ubuntu3
ProcVersionSignature: Ubuntu 2.6.32-24.38-generic 2.6.32.15+drm33.5
Uname: Linux 2.6.32-24-generic i686
Architecture: i386
Date: Wed Aug 4 15:40:57 2010
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release i386 (20100429)
ProcEnviron:
 LANG=de_DE.utf8
 SHELL=/bin/bash
SourcePackage: nss

[Chaskiel Grundman (cg2v)]

It appears this is because newer nss versions use read only memory to hold the buffer passed to C_Initialize. opencryptoki is attempting to force a (obsolete?) flag to be on. Upstream removed this behavior about a year ago.

[Alessio Treglia (quadrispro)]

Thanks for the patch.

This seems solved in Oneiric, would you confirm that?

[Launchpad Janitor (janitor)]

[Expired for opencryptoki (Ubuntu) because there has been no activity for 60 days.]

[August Huber (augs)]

reopening, since patch was never integrated into release, this is still a problem on lucid