[Bug 250792] New: libcrypto-0.9.8 : Use of uninitialised value of size 8
https://bugzilla.novell.com/show_bug.cgi?id=250792 Summary: libcrypto-0.9.8 : Use of uninitialised value of size 8 Product: openSUSE 10.3 Version: Alpha 1plus Platform: x86-64 OS/Version: SuSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: dcb314@hotmail.com QAContact: qa@suse.de I just tried to build package bacula-2.0.2-4 with valgrind on Suse Linux 10.3 Alpha 1. I used command line valgrind -q --trace-children=yes rpmbuild -bc bacula.spec The output contains checking for library containing dlopen... -ldl ==29791== Use of uninitialised value of size 8 ==29791== at 0x51311BD: EVP_EncodeBlock (in /usr/lib64/libcrypto.so.0.9.8) ==29791== by 0x5131496: EVP_EncodeFinal (in /usr/lib64/libcrypto.so.0.9.8) ==29791== by 0x51364B3: (within /usr/lib64/libcrypto.so.0.9.8) ==29791== by 0x444D46: (within /usr/bin/openssl) ==29791== by 0x412A39: (within /usr/bin/openssl) ==29791== by 0x412FF2: (within /usr/bin/openssl) ==29791== by 0x581A943: (below main) (in /lib64/libc-2.5.so) ==29791== So it seems that libcrypto-0.9.8 is at fault. Suggest code rework. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=250792 meissner@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|security-team@suse.de |mkoenig@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=250792 mkoenig@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Comment #1 from mkoenig@novell.com 2007-03-06 04:50 MST ------- No, this seems to be a false positive from valgrind -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=250792 dcb314@hotmail.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID | ------- Comment #2 from dcb314@hotmail.com 2007-03-06 05:29 MST ------- (In reply to comment #1)
No, this seems to be a false positive from valgrind
Interesting. Would it be possible to find out a little more detail about where valgrind is going wrong ? For example, which line of source code in the libcrypto is it complaining about ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=250792 mkoenig@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |INVALID ------- Comment #3 from mkoenig@novell.com 2007-06-13 07:03 MST ------- It is a know issue that openssl delivers false positives with valgrind. You have to build openssl with -DPURIFY. That resolves the issues. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
participants (1)
-
bugzilla_noreply＠novell.com