Follow-up to Crashes with gpg-agent 2.1.18

NIIBE Yutaka gniibe at fsij.org
Fri Apr 21 03:19:14 CEST 2017


Hello,

Matthew Summers <matthew.summers at syapse.com> writes:
> The trick to reproducing this is to employ a high level of parallelism
> when calling `gpg -d` against some small example cipher text.
[...]
> For versions, I started experiencing this problem with gnupg-2.1.18,
> but only after upgrading to nettle-3.3 and glib-2.50.3 (gnutls-3.3.26
> was consistent). I later upgrade gnupg to 2.1.20 and the issue
> persisted. One interesting thing is that I was using 2.1.18 with great
> success in handling highly parallel tasks until the time of these
> upgrades. It is no small thing to track down every library that gnupg
> utilizes for the agent, so any help here would be wonderful.

Thank you for your information.

GnuPG doesn't use nettle and glib, so, I wonder if it's related.

Recently, after 2.1.20, I fixed a race in gpg-agent, which is
possible to cause double free (and crash).

    https://dev.gnupg.org/T3027

This may be related.
-- 



More information about the Gnupg-devel mailing list