Bug in libgcrypt v1.1.93.

[low halo, Defender of Truth and Liberty]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

w0rd.

I just upgraded to libgcrypt v1.1.93, and UM dies during the
handshake setup with the following error sent to stdout:

  ultramagnetic: ath.c:88: _gcry_ath_mutex_unlock: Assertion
  `*lock == ((ath_mutex_t) 1)' failed.

Here's a gdb backtrace of when this happens:

Program received signal SIGABRT, Aborted.
0x40696161 in kill () from /lib/libc.so.6
(gdb) bt full
#0  0x40696161 in kill () from /lib/libc.so.6
No symbol table info available.
#1  0x404e9526 in pthread_kill () from /lib/libpthread.so.0
No symbol table info available.
#2  0x404e9815 in raise () from /lib/libpthread.so.0
No symbol table info available.
#3  0x40695daf in raise () from /lib/libc.so.6
No symbol table info available.
#4  0x40697489 in abort () from /lib/libc.so.6
No symbol table info available.
#5  0x4068f247 in __assert_fail () from /lib/libc.so.6
No symbol table info available.
#6  0x4047a486 in _gcry_ath_mutex_unlock (lock=0x404e97f0) at ath.c:93
No locals.
#7  0x4047e914 in _gcry_secmem_realloc (p=0x409c91c0, newsize=24)
    at secmem.c:581
        size = 32
        a = (void *) 0x409c91c0
#8  0x4047dedf in _gcry_private_realloc (a=0x409c91c0, n=24) at
stdmem.c:143
No locals.
#9  0x4047b320 in gcry_realloc (a=0x6, n=1078914000) at global.c:456
No locals.
#10 0x4047b56c in gcry_xrealloc (a=0x409c91c0, n=24) at global.c:541
        p = (void *) 0x404e97f0
#11 0x404b21ea in _gcry_mpi_resize (a=0x8329650, nlimbs=6) at
mpiutil.c:131
No locals.
#12 0x404adbda in gcry_mpi_add (w=0x8329650, u=0x835ee10, v=0x835f010)
    at mpi-add.c:113
        wp = 0x8329668
        up = 0x835f010
        vp = 0x835f010
        usize = 5
        vsize = 5
        wsize = 1078892528
        usign = 0
        vsize = 5
        wsize = 1078892528
        usign = 0
        vsign = 1
        wsign = 0
#13 0x404addd6 in gcry_mpi_sub (w=0x404e97f0, u=0x404e97f0,
v=0x404e97f0)
    at mpi-add.c:218
        vv = 0x835f010
#14 0x404af148 in _gcry_mpi_invm (x=0x404e97f0, a=0x404e97f0,
n=0x404e97f0)
    at mpi-inv.c:242
        u = 0x834cc70
        v = 0x834c280
        u1 = 0x834c2b0
        u2 = 0x0
        u3 = 0x835ee10
        v1 = 0x835ee28
        v2 = 0x0
        v3 = 0x835ee58
        t1 = 0x8329638
        t2 = 0x0
        t3 = 0x8329650
        sign = 137684792
        odd = 1
#15 0x4048e309 in sign (r=0x8350588, s=0x404e97f0, hash=0x404e97f0,
    skey=0xbfff8c80) at dsa.c:307
        k = 0x834e720
        kinv = 0x834e738
        tmp = 0x0
#16 0x4048e6d9 in _gcry_dsa_sign (algo=17, resarr=0x8320ff8,
data=0x8347070,
    skey=0x404eebd0) at dsa.c:432
        err = GPG_ERR_NO_ERROR
        sk = {p = 0x835eed8, q = 0x835efc0, g = 0x8347028, y =
0x8350068,
  x = 0x8347040}
#17 0x40497948 in pubkey_sign (algorithm=17, resarr=0x8320ff8, 
data=0x8347070,
    skey=0x834fe90) at pubkey.c:638
        pubkey = (gcry_pk_spec_t *) 0x404e97f0
        module = 0x8118d90
        rc = GPG_ERR_PUBKEY_ALGO
        i = 135368080
#18 0x404994f8 in gcry_pk_sign (r_sig=0xbfff8d68, s_hash=0x404e97f0,
    s_skey=0x829f338) at pubkey.c:1614
        skey = (gcry_mpi_t *) 0x834fe90
        hash = 0x8347070
        result = (gcry_mpi_t *) 0x8320ff8
        pubkey = (gcry_pk_spec_t *) 0x404e97f0
        module = 0x8118d90
        algo_name = 0x404b46a0 "dsa"
        algo_elems = 0x404b80e1 "rs"
        i = 6
        rc = GPG_ERR_NO_ERROR
#19 0x080f377d in send_public_keys (gc=0x82f6bc0, who=0x8114fa0
"XXXXXX")
    at um_encryption.c:879


Note that the function 'send_public_keys' is mine.

w0rd.

    - low halo

- --
low halo <lowhalo at-s1gn hush d0t c0m>
Defender of Truth and Liberty
http://ultramagnetic.sourceforge.net/
 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x3AFB17F6
9AB1 FF04 016F 89A3 5B4E  A585 BDBB 5FBE 3AFB 17F6

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFASkBtvbtfvjr7F/YRAjNLAKCBBN0Xgyh6rxHvihPS1hLNesONuwCfYHEa
VNvHCAms7xNe+rxLUSbxzis=
=7rua
-----END PGP SIGNATURE-----




Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427