316625 - NISCC strsclnt core dump in stan_GetCERTCertificate

Status: RESOLVED WONTFIX

(NSS :: Libraries, defect, P1)

Description

[Jason Reid]

20051115 security310 NISCC run produced a core file with the following stack:

mahatma[svbld]:/niscc/archive/20051115.2> file core.092357
core.092357:    ELF 32-bit LSB core file 80386 Version 1, from 'strsclnt'
mahatma[svbld]:/niscc/archive/20051115.2> mdb core.092357
Loading modules: [ libc.so.1 libuutil.so.1 ld.so.1 ]
> $c
libnss3.so`stan_GetCERTCertificate+0x114(80cc090, 0)
libnss3.so`STAN_GetCERTCertificateOrRelease+0x30(80cc090)
libnss3.so`__CERT_NewTempCertificate+0x3cc(80bff58, d090bb94, 0, 0, 1)
libssl3.so`ssl3_HandleCertificate+0x378(80c8910, 8119e01, 210)
libssl3.so`ssl3_HandleHandshakeMessage+0x525(80c8910, 8119bfe, 413)
libssl3.so`ssl3_HandleHandshake+0x23e(80c8910, 80c8ab4)
libssl3.so`ssl3_HandleRecord+0x70d(80c8910, d090bd54, 80c8ab4)
libssl3.so`ssl3_GatherCompleteHandshake+0xe9(80c8910, 0)
libssl3.so`ssl_GatherRecord1stHandshake+0x96(80c8910)
libssl3.so`ssl_Do1stHandshake+0x28f(80c8910)
libssl3.so`ssl_SecureSend+0x22e(80c8910, 806ba84, 15, 0)
libssl3.so`ssl_SecureWrite+0x38(80c8910, 806ba84, 15)
libssl3.so`ssl_Write+0xf0(80927b8, 806ba84, 15)
libnspr4.so`PR_Write+0x3b(80927b8, 806ba84, 15)
handle_connection+0x7c(80927b8, 4)
do_connects+0x351(8047590, 80925f8, 4)
thread_wrapper+0x6c(808f428)
libnspr4.so`_pt_root+0x151(80c76c8)
libc.so.1`_thr_setup+0x4e(d0920800)
libc.so.1`_lwp_start(d0920800, 0, 0, d090bff8, d0c1d230, d0920800)
>

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

I'm pretty sure this is a duplicate of another bug we're working on now.
Julien, can you confirm?
Interesting to note this was filed against 3.10

Comment 2

[Julien Pierre]

Only bug 331164 includes this function on the stack. 
But this bug doesn't have enough information. The core file is long gone. It doesn't say if it was debug or optimized, and only one thread stack is posted.
Marking WONTFIX.

Comment 3

[Jason Reid]

I archive NISCC core files.

mahatma[svbld]:/niscc/archive/20051115.2> pstack ./core.092357
core './core.092357' of 16859:  /share/builds/mccrel3/security/security310/builds/20051115.1/wozzeck_S
-----------------  lwp# 1 / thread# 1  --------------------
 d0c1d2a9 __lwp_park (809273c, 80c74b8, 0) + 19
 d0c17b2a cond_wait_queue (809273c, 80c74b8, 0, 0) + 3b
 d0c18023 _cond_wait (809273c, 80c74b8) + 66
 d0c18065 cond_wait (809273c, 80c74b8) + 21
 d0c1809e pthread_cond_wait (809273c, 80c74b8) + 1b
 d0d866b0 PR_WaitCondVar (8092738, ffffffff) + 198
 080535e4 ???????? (8054170, 8047590, 80925f8, 5)
 0805523c ???????? (20fd, 19eca, 8047644, 80923d8)
 080559cc ???????? (c, 80476c0, 80476f4)
 08052bfa ???????? (c, 8047828, 80478a8, 80478ab, 80478ca, 80478cd)
-----------------  lwp# 2 / thread# 2  --------------------
 d0eb0450 ???????? (80bff58, d0959b38)
 d0e8bb91 __CERT_NewTempCertificate (80bff58, d0959b94, 0, 0, 1) + 89
 d0f87dcd ???????? (80fe258, 8110f72, 0)
 d0f898d5 ???????? (80fe258, 8110bee, 384)
 d0f89e0e ???????? (80fe258, 80fe3fc)
 d0f8a7ed ???????? (80fe258, d0959d54, 80fe3fc)
 d0f8be79 ???????? (80fe258, 0)
 d0f8f41e ???????? (80fe258)
 d0f987af ???????? (80fe258)
 d0f9ac2e ???????? (80fe258, 806ba84, 15, 0)
 d0f9ad98 ???????? (80fe258, 806ba84, 15)
 d0fa20b8 ???????? (80927f8, 806ba84, 15)
 d0d5dfc3 PR_Write (80927f8, 806ba84, 15) + 3b
 0805400c ???????? (80927f8, 1)
 080544c1 ???????? (8047590, 80925f8, 1)
 0805347c ???????? (808f3c8)
 d0d90e19 ???????? (80c7518)
 d0c1cf3f _thr_setup (d0a32400) + 4e
 d0c1d230 _lwp_start (d0a32400, 0, 0, d0959ff8, d0c1d230, d0a32400)
-----------------  lwp# 3 / thread# 3  --------------------
 d0c1e305 __pollsys (d0947c0c, 1, d0947be0, 0) + 15
 d0bc8546 poll     (d0947c0c, 1, 1388) + 52
 d0d883f7 ???????? (d0947c60)
 d0d888c8 ???????? (d0947c60)
 d0d8b39f ???????? (80c7db8, 80c7948, 3, 0, ffffffff)
 d0f959bc ???????? (80c7768, 80c7948, 3, 0)
 d0f96297 ???????? (80c7768, 80c7908, 0)
 d0f96cac ???????? (80c7768, 0)
 d0f8f437 ???????? (80c7768)
 d0f987af ???????? (80c7768)
 d0f9ac2e ???????? (80c7768, 806ba84, 15, 0)
 d0f9ad98 ???????? (80c7768, 806ba84, 15)
 d0fa20b8 ???????? (8092778, 806ba84, 15)
 d0d5dfc3 PR_Write (8092778, 806ba84, 15) + 3b
 0805400c ???????? (8092778, 2)
 080544c1 ???????? (8047590, 80925f8, 2)
 0805347c ???????? (808f3e8)
 d0d90e19 ???????? (80c7588)
 d0c1cf3f _thr_setup (d0920000) + 4e
 d0c1d230 _lwp_start (d0920000, 0, 0, d0947ff8, d0c1d230, d0920000)
-----------------  lwp# 4 / thread# 4  --------------------
 d0e92395 ???????? (d091da40, d0efeeb0, d091da08, 80ffef0, 1)
 d0e92a1b SEC_QuickDERDecodeItem (80ffef0, d091da40, d0efeeb0, d091dab0) + a3
 d0e7afb8 ???????? (d091dab0, d091da98)
 d0eb4671 ???????? (d091db38, d091dae8, d091dae0)
 d0eb4724 ???????? (80c4178, d091db38)
 d0ead0c4 ???????? (80c40d8, d091db38)
 d0e8bb70 __CERT_NewTempCertificate (80bff58, d091db94, 0, 0, 1) + 68
 d0f87dcd ???????? (80c8568, 8115809, 0)
 d0f898d5 ???????? (80c8568, 81153f6, 413)
 d0f89e0e ???????? (80c8568, 80c870c)
 d0f8a7ed ???????? (80c8568, d091dd54, 80c870c)
 d0f8be79 ???????? (80c8568, 0)
 d0f8f41e ???????? (80c8568)
 d0f987af ???????? (80c8568)
 d0f9ac2e ???????? (80c8568, 806ba84, 15, 0)
 d0f9ad98 ???????? (80c8568, 806ba84, 15)
 d0fa20b8 ???????? (8092838, 806ba84, 15)
 d0d5dfc3 PR_Write (8092838, 806ba84, 15) + 3b
 0805400c ???????? (8092838, 3)
 080544c1 ???????? (8047590, 80925f8, 3)
 0805347c ???????? (808f408)
 d0d90e19 ???????? (80c7628)
 d0c1cf3f _thr_setup (d0920400) + 4e
 d0c1d230 _lwp_start (d0920400, 0, 0, d091dff8, d0c1d230, d0920400)
-----------------  lwp# 5 / thread# 5  --------------------
 d0eb92ac ???????? (80cc090, 0)
 d0eb9478 ???????? (80cc090)
 d0e8bed4 __CERT_NewTempCertificate (80bff58, d090bb94, 0, 0, 1) + 3cc
 d0f87cd8 ???????? (80c8910, 8119e01, 210)
 d0f898d5 ???????? (80c8910, 8119bfe, 413)
 d0f89e0e ???????? (80c8910, 80c8ab4)
 d0f8a7ed ???????? (80c8910, d090bd54, 80c8ab4)
 d0f8be79 ???????? (80c8910, 0)
 d0f8f41e ???????? (80c8910)
 d0f987af ???????? (80c8910)
 d0f9ac2e ???????? (80c8910, 806ba84, 15, 0)
 d0f9ad98 ???????? (80c8910, 806ba84, 15)
 d0fa20b8 ???????? (80927b8, 806ba84, 15)
 d0d5dfc3 PR_Write (80927b8, 806ba84, 15) + 3b
 0805400c ???????? (80927b8, 4)
 080544c1 ???????? (8047590, 80925f8, 4)
 0805347c ???????? (808f428)
 d0d90e19 ???????? (80c76c8)
 d0c1cf3f _thr_setup (d0920800) + 4e
 d0c1d230 _lwp_start (d0920800, 0, 0, d090bff8, d0c1d230, d0920800)

Comment 4

[Julien Pierre]

Jason,

Unfortunately, with the build gone, the core file is useless now . 2/3 of the frames are missing.