pkg/44214: openssl crashes on OpenSolaris

[Aleksej Saushev <asau%inbox.ru@localhost>]

>Number:         44214
>Category:       pkg
>Synopsis:       openssl crashes on OpenSolaris
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Dec 10 11:25:00 +0000 2010
>Originator:     asau%inbox.ru@localhost
>Release:        SunOS 5.11 i86pc
>Organization:
HE CE3OH...
>Environment:
System: SunOS 5.11 i86pc
>Description:
        pkgsrc-built openssl crashes on OpenSolaris

        Sample trace:

$ pstack core
core 'core' of 28090:        openssl rand 6 -base64
 feecc135 _init    (fe9e0a28, feffb334, 1, feffb394, feecc120, 0) + 15
 fefd13e6 call_init (fe9e0a10, 1, fef903f8, 10) + 106
 fefd02eb setup    (8047ca0, 8047d00, 0, 8047fdf, 1000, fefbf961) + 154f
 fefde3f8 _setup   (8047c48, 3fb28, 3, 8047c8c, 4, 8047ca0) + 310
 fefc46a4 _rt_boot (8047d70, 8047d75, 8047d77, 0, 8047d7f, 8047de4) + 56
 08047d68 ???????? ()


        Dynamic dependencies list looks suspiciously:

$ ldd /opt/pkg/bin/openssl
    libssl.so.0.9.8 =>       /opt/pkg/lib/libssl.so.0.9.8
   libcrypto.so.0.9.8 =>    /opt/pkg/lib/libcrypto.so.0.9.8
        libsocket.so.1 =>        /lib/libsocket.so.1
    libnsl.so.1 =>   /lib/libnsl.so.1
       libdl.so.1 =>    /lib/libdl.so.1
        libc.so.1 =>     /lib/libc.so.1
 libcrypto.so.0.9.8 =>    /lib/libcrypto.so.0.9.8
        libgcc_s.so.1 =>         /usr/sfw/lib/libgcc_s.so.1
     libmp.so.2 =>    /lib/libmp.so.2
        libmd.so.1 =>    /lib/libmd.so.1
        libscf.so.1 =>   /lib/libscf.so.1
       libuutil.so.1 =>         /lib/libuutil.so.1
     libgen.so.1 =>   /lib/libgen.so.1
       libsmbios.so.1 =>        /usr/lib/libsmbios.so.1
        libm.so.2 =>     /lib/libm.so.2

        Note that it references two different libraries "libcrypto".


        Just in case it may be relevant, compiler used:

$ gcc --version
gcc (GCC) 3.4.3 (csl-sol210-3_4-20050802)


        For comparison, another openssl instance works correct:

$ /opt/local/bin/openssl rand 6 -base64
4+sj8wVo

        Its dynamic dependencies are:

$ ldd /opt/local/bin/openssl
      libssl.so.0.9.8 =>       /opt/local/lib/libssl.so.0.9.8
 libcrypto.so.0.9.8 =>    /opt/local/lib/libcrypto.so.0.9.8
      libsocket.so.1 =>        /lib/libsocket.so.1
    libnsl.so.1 =>   /lib/libnsl.so.1
       libdl.so.1 =>    /lib/libdl.so.1
        libc.so.1 =>     /lib/libc.so.1
 libgcc_s.so.1 =>         /usr/sfw/lib/libgcc_s.so.1
     libmp.so.2 =>    /lib/libmp.so.2
        libmd.so.1 =>    /lib/libmd.so.1
        libscf.so.1 =>   /lib/libscf.so.1
       libuutil.so.1 =>         /lib/libuutil.so.1
     libgen.so.1 =>   /lib/libgen.so.1
       libsmbios.so.1 =>        /usr/lib/libsmbios.so.1
        libm.so.2 =>     /lib/libm.so.2

>How-To-Repeat:
        openssl rand 6 -base64
>Fix:
        Not yet.