1542741 - certutil -F crashes with segmentation fault

Status: RESOLVED FIXED

(NSS :: Libraries, defect, P1)

Description

[Alicja Kario]

Running certutil -F causes it to crash with a segmentation fault.

Using NSS hg repo, f34bec6c5004

$ LD_LIBRARY_PATH="$NSS_DIR/lib" gdb "$NSS_DIR/bin/certutil"
GNU gdb (GDB) Fedora 8.1.1-4.fc28
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/.
Find the GDB manual and other documentation resources online at:
http://www.gnu.org/software/gdb/documentation/.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /home/hkario/dev/dist/Linux4.20_x86_64_cc_glibc_PTH_64_DBG.OBJ/bin/certutil...done.
(gdb) run -F
Starting program: /home/hkario/dev/dist/Linux4.20_x86_64_cc_glibc_PTH_64_DBG.OBJ/bin/certutil -F
Missing separate debuginfos, use: dnf debuginfo-install glibc-2.27-37.fc28.x86_64
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff669c8a1 in __strlen_avx2 () from /lib64/libc.so.6
(gdb) bt
#0 0x00007ffff669c8a1 in __strlen_avx2 () from /lib64/libc.so.6
#1 0x00007ffff755712b in cvt_s (ss=0x7fffffffcb00, str=0x46 <error: Cannot access memory at address 0x46>, width=0, prec=-1,
flags=0) at ../../../../pr/src/io/prprf.c:374
#2 0x00007ffff7558865 in dosprintf (ss=0x7fffffffcb00, fmt=0x42735a " -%c: specify a nickname (-n) or\n a key ID (-k).\n",
ap=0x7fffffffcba0) at ../../../../pr/src/io/prprf.c:1018
#3 0x00007ffff7558e3a in PR_vsmprintf (fmt=0x427358 "%s -%c: specify a nickname (-n) or\n a key ID (-k).\n", ap=0x7fffffffcba0)
at ../../../../pr/src/io/prprf.c:1184
#4 0x00007ffff755ac2d in PR_vfprintf (fd=0x633940, fmt=0x427358 "%s -%c: specify a nickname (-n) or\n a key ID (-k).\n",
ap=0x7fffffffcba0) at ../../../../pr/src/io/prstdio.c:28
#5 0x00007ffff755abf8 in PR_fprintf (fd=0x633940, fmt=0x427358 "%s -%c: specify a nickname (-n) or\n a key ID (-k).\n")
at ../../../../pr/src/io/prstdio.c:19
#6 0x000000000041276c in certutil_main (argc=2, argv=0x7fffffffcff8, initialize=1) at certutil.c:3120
#7 0x0000000000414eb8 in main (argc=2, argv=0x7fffffffcff8) at certutil.c:4032

Comment 1

[Daiki Ueno [:ueno]]

Attachment: certutil-F-error.patch

Oops, should be fixed with the attached patch.

Comment 2

[Alicja Kario]

Comment on attachment 9056568 [details] [diff] [review]
certutil-F-error.patch

r+

Comment 3

[Robert Relyea]

Comment on attachment 9056568 [details] [diff] [review]
certutil-F-error.patch

Review of attachment 9056568 [details] [diff] [review]:
-----------------------------------------------------------------

Yup, that'll do it.

Comment 4

[Daiki Ueno [:ueno]]

Pushed as:
https://hg.mozilla.org/projects/nss/rev/02ea5f29ac3c