[Bug 1085] Intermittent ssh core dumps

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=1085





------- Additional Comments From js at phil.uu.nl  2005-09-27 05:28 -------
(1) Looks like an OpenSSL 0.9.8 issue to me.  Does not happen with 0.9.7g.
    0.9.8's "make test" was unproblematic, though.

(2) Built OpenSSH with the "-g" flag.  The core dump showsjs at goedel:pts/5(22)
adb  /phil/sw/sunos/sparc/obj/openssh-4.2p1/ssh core                           
      ~ 21:17
core file = core -- program ``ssh'' on platform SUNW,Ultra-250
SIGSEGV: Segmentation Fault
$C
bn_sub_words() + 3c
        [savfp=0xffbeef48,savpc=0x801bc]
bn_sub_part_words(13f400,13ba88,13baa8,7,1,ac0b2f1) + 10
        [savfp=0xffbeef48,savpc=0x801bc]
bn_mul_recursive(20,ffffffff,0,10,0,ffffffff) + 41c
        [savfp=0xffbeefd8,savpc=0x8006c]
bn_mul_recursive(40,ffffffff,13f360,20,0,ffffffff) + 2cc
        [savfp=0xffbef068,savpc=0x80ef8]
BN_mul(13e700,13e6b0,13e6c4,13e628,3,1) + 2b8
        [savfp=0xffbef0e0,savpc=0x836f0]
BN_mod_mul_montgomery(13e6b0,13e6b0,13e6c4,13e480,13e628,1f) + 30
        [savfp=0xffbef150,savpc=0x7ece4]
BN_mod_exp_mont_consttime(80,bb,ffbef244,b,13e628,13e480) + 424
        [savfp=0xffbef1d8,savpc=0x49068]
generate_key(13e5d0,20,12a490,0,130,218ac) + 1c8
        [savfp=0xffbef268,savpc=0x48e2c]
DH_generate_key(13e5d0,12a490,12a760,0,0,0) + c
        [savfp=0xffbef2d8,savpc=0x36338]
dh_gen_key(13e5d0,80,400,2000,ff1b5eec,ff146618) + 80
        [savfp=0xffbef348,savpc=0x34964]
kexgex_client(13b8c0,2,0,0,ff1b5eec,400) + 168
        [savfp=0xffbef3f0,savpc=0x31a98]
kex_input_kexinit(1,6,13b8c0,13b938,13ea20,2) + 45c
        [savfp=0xffbef468,savpc=0x31238]
dispatch_run(0,13b904,13b8c0,0,12a424,ff0000) + 54
        [savfp=0xffbef4e0,savpc=0x1d500]
ssh_kex2(114c00,125aa0,0,7efefeff,81010100,ff0000) + 124
        [savfp=0xffbef550,savpc=0x1b308]
ssh_login(126f34,ffbef7b8,4,4,127718,125800) + 30c
        [savfp=0xffbef7c8,savpc=0x13f34]
main(125800,125aa0,122000,126c00,127cd0,125800) + c20
        [savfp=0xffbefa78,savpc=0x1245c]



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.