[gnutls-help] Make check fails on gnutls 3.4.9

[Nikos Mavrogiannopoulos]

On Tue, 2016-04-05 at 13:10 -0300, John Coppens wrote:

> Hello people,

Please use the bugs at gnutls.org only for non public bugs. I'm forwarding
your mail to the mailing list.

> 
> Doing a make check on just-compiled gnutls 3.4.9 (on Linux), I get 
> this:
> 
> make[4]: Entering directory `/usr/local/src/internet/gnutls
> -3.4.9/guile/tests'
> FAIL: anonymous-auth.scm
> FAIL: session-record-port.scm
> FAIL: pkcs-import-export.scm
> FAIL: errors.scm
> FAIL: x509-certificates.scm
> FAIL: x509-auth.scm
> FAIL: priorities.scm
> FAIL: openpgp-keys.scm
> FAIL: openpgp-keyring.scm
> FAIL: openpgp-auth.scm
> FAIL: srp-base64.scm

Most likely a guile issue in your system. 

> Except for just a couple of SKIPs in the previous tests, all previous 
> tests
> went well. Though I normally confide and don't run checks (shame on 
> me), I
> did run them now, because I get a Segmentation Fault  when running 
> Gobby,
> which I can't seem to find the cause of:
> 
> #0  0x00007ffff1c03060 in __memcpy_sse2_unaligned () from 
> /lib64/libc.so.6
> #1  0x00007ffff2a57f16 in _asn1_set_value (node=node at entry=0xad0a10, 
> value=0x2f53555f6e652f65, len=1298088780)
>     at parser_aux.c:245
> #2  0x00007ffff2a59405 in _asn1_copy_structure3 
> (source_node=0x8121a0) at structure.c:417
> #3  0x00007ffff2a5c05e in asn1_der_coding (element=<optimized out>, 
> name=<optimized out>, ider=0x0, 
>     len=0x7fffffffbd50, ErrorDescription=0x0) at coding.c:1029
> #4  0x00007ffff29de67d in _gnutls_x509_der_encode (src=0x8121a0, 
> src_name=0x7ffff2a6bea9 "", res=0x7fffffffbde0, 
>     str=str at entry=0) at common.c:1255
> #5  0x00007ffff29de936 in _gnutls_x509_export_int_named2 
> (asn1_data=<optimized out>, name=<optimized out>, 
>     format=<optimized out>, pem_header=<optimized out>, 
> out=<optimized out>) at common.c:1004
> #6  0x00007ffff29dea4c in _gnutls_x509_export_int_named 
> (asn1_data=<optimized out>, name=<optimized out>, 
>     format=GNUTLS_X509_FMT_DER, pem_header=<optimized out>, 
> output_data=0x0, output_data_size=0x7fffffffbe28)
>     at common.c:961
> #7  0x00007ffff2a085dd in _gnutls_x509_crt_cpy (dest=0xac3e90, 
> src=0x7ee930) at x509.c:116
> #8  0x00007ffff29c0a64 in gnutls_certificate_set_x509_trust 
> (res=0xac3e00, ca_list=<optimized out>, 
>     ca_list_size=151) at gnutls_x509.c:1557
> #9  0x000000000047c1d0 in Gobby::CertificateManager::make_credentials 
> (this=this at entry=0x7fffffffc790)
>     at certificatemanager.cpp:442
> #10 0x000000000047d17e in Gobby::CertificateManager::load_trust (
> this=this at entry=0x7fffffffc790)
>     at certificatemanager.cpp:388
> #11 0x000000000047d585 in 
> Gobby::CertificateManager::CertificateManager (this=0x7fffffffc790, 
> preferences=...)
>     at certificatemanager.cpp:53
> #12 0x000000000042422e in main (argc=1, argv=0x7fffffffdd98) at 
> main.cpp:287

It looks like a certificate is crashing the parser, but I have no idea
whether this is a valid certificate provided, or some it involves some
invalid memory addresses. If you can reproduce that with a certificate
and certtool, after verifying that you are using a recent gnutls and
libtasn1 versions, please report them as a bug with a reproducer.

regards,
Nikos