[Bug 1230870] kscreenlocker crashes with pam 1.6.1-4.1 on X11 when pam_pkcs11 is installed
https://bugzilla.suse.com/show_bug.cgi?id=1230870 https://bugzilla.suse.com/show_bug.cgi?id=1230870#c6 Fabian Vogt <fvogt@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt@suse.com --- Comment #6 from Fabian Vogt <fvogt@suse.com> --- I was able to get some info by running valgrind /usr/libexec/kscreenlocker_greet --testing: ERROR:pam_pkcs11.c:627: no valid certificate which meets all requirements found ==31587== Thread 12 QThread: ==31587== Conditional jump or move depends on uninitialised value(s) ==31587== at 0x1DD37E52: pam_sm_authenticate (pam_pkcs11.c:796) ==31587== by 0x4AA42E2: ??? (in /usr/lib64/libpam.so.0.85.1) ==31587== by 0x4AA4B48: pam_authenticate (in /usr/lib64/libpam.so.0.85.1) ==31587== by 0x122803: ??? (in /usr/libexec/kscreenlocker_greet) ==31587== by 0x6848E1A: QObject::event(QEvent*) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x6805C2F: QCoreApplication::notifyInternal2(QObject*, QEvent*) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x6805F8F: QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x6A39FE2: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x89E975F: ??? (in /usr/lib64/libglib-2.0.so.0.8000.4) ==31587== by 0x89EB3A7: ??? (in /usr/lib64/libglib-2.0.so.0.8000.4) ==31587== by 0x89EBA5B: g_main_context_iteration (in /usr/lib64/libglib-2.0.so.0.8000.4) ==31587== by 0x6A38ADB: QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== ==31587== Conditional jump or move depends on uninitialised value(s) ==31587== at 0x4848711: free (in /usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so) ==31587== by 0x1DD37E5B: pam_sm_authenticate (pam_pkcs11.c:798) ==31587== by 0x4AA42E2: ??? (in /usr/lib64/libpam.so.0.85.1) ==31587== by 0x4AA4B48: pam_authenticate (in /usr/lib64/libpam.so.0.85.1) ==31587== by 0x122803: ??? (in /usr/libexec/kscreenlocker_greet) ==31587== by 0x6848E1A: QObject::event(QEvent*) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x6805C2F: QCoreApplication::notifyInternal2(QObject*, QEvent*) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x6805F8F: QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x6A39FE2: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x89E975F: ??? (in /usr/lib64/libglib-2.0.so.0.8000.4) ==31587== by 0x89EB3A7: ??? (in /usr/lib64/libglib-2.0.so.0.8000.4) ==31587== by 0x89EBA5B: g_main_context_iteration (in /usr/lib64/libglib-2.0.so.0.8000.4) ==31587== ==31587== Invalid free() / delete / delete[] / realloc() ==31587== at 0x484875B: free (in /usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so) ==31587== by 0x1DD37E5B: pam_sm_authenticate (pam_pkcs11.c:798) ==31587== by 0x4AA42E2: ??? (in /usr/lib64/libpam.so.0.85.1) ==31587== by 0x4AA4B48: pam_authenticate (in /usr/lib64/libpam.so.0.85.1) ==31587== by 0x122803: ??? (in /usr/libexec/kscreenlocker_greet) ==31587== by 0x6848E1A: QObject::event(QEvent*) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x6805C2F: QCoreApplication::notifyInternal2(QObject*, QEvent*) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x6805F8F: QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x6A39FE2: ??? (in /usr/lib64/libQt6Core.so.6.7.2) ==31587== by 0x89E975F: ??? (in /usr/lib64/libglib-2.0.so.0.8000.4) ==31587== by 0x89EB3A7: ??? (in /usr/lib64/libglib-2.0.so.0.8000.4) ==31587== by 0x89EBA5B: g_main_context_iteration (in /usr/lib64/libglib-2.0.so.0.8000.4) ==31587== Address 0xbd7d2f0 is 192 bytes inside a block of size 456 alloc'd ==31587== at 0x4845F0F: operator new(unsigned long) (in /usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so) ==31587== by 0x59816BA: QQmlTypeLoader::getType(QUrl const&, QQmlTypeLoader::Mode) (in /usr/lib64/libQt6Qml.so.6.7.2) (...snip) This points to an uninitialized "password" variable in pam_pkcs11's pam_sm_authenticate function. Looks like this was fixed in https://github.com/OpenSC/pam_pkcs11/commit/f8e7d85aa3ca4fd2e2a8c2dfe601d122..., which isn't part of any release yet. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com