OpenSSH 2.3.0p4/2.2.0p1, Solaris 8, ssh-keygen bus error

[Edward S. Marshall]

On Fri, 9 Feb 2001, Damien Miller wrote:
> Could you please turn on very verbose debugging "ssh -v -v -v " and
> report the output?

A little more information; sshd is failing with a bus error as well (the
client seems fine so far in light use):

#  gdb ./sshd
GNU gdb 5.0
Copyright 2000 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "sparc-sun-solaris2.8"...
(gdb) set args -ddd
(gdb) run
Starting program: /merc/tools/obj/openssh-2.3.0p4/./sshd -ddd
debug1: sshd version OpenSSH_2.3.0p1
debug1: Seeding random number generator
debug1: read DSA private key done
debug1: Seeding random number generator
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
Generating 768 bit RSA key.
debug1: Seeding random number generator
debug1: Seeding random number generator
RSA key generation complete.
debug1: Server will not fork when running in debugging mode.
Connection from 172.16.64.201 port 1022
debug1: Client protocol version 2.0; client software version OpenSSH_2.3.0p1
debug1: no match: OpenSSH_2.3.0p1
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-1.99-OpenSSH_2.3.0p1
debug1: send KEXINIT
debug1: done
debug1: wait KEXINIT
debug1: got kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug1: got kexinit: ssh-dss
debug1: got kexinit: 3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes128-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc at lysator.liu.se
debug1: got kexinit: 3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes128-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc at lysator.liu.se
debug1: got kexinit: hmac-sha1,hmac-md5,hmac-ripemd160 at openssh.com
debug1: got kexinit: hmac-sha1,hmac-md5,hmac-ripemd160 at openssh.com
debug1: got kexinit: none
debug1: got kexinit: none
debug1: got kexinit:
debug1: got kexinit:
debug1: first kex follow: 0
debug1: reserved: 0
debug1: done
debug1: kex: client->server 3des-cbc hmac-sha1 none
debug1: kex: server->client 3des-cbc hmac-sha1 none
debug1: Wait SSH2_MSG_KEX_DH_GEX_REQUEST.

Program received signal SIGSEGV, Segmentation fault.
0x4de9c in DH_new_method ()
(gdb) where
#0  0x4de9c in DH_new_method ()
#1  0x4e16c in DH_new ()
#2  0x2fb30 in dh_new_group (gen=0xe5498, modulus=0xe54b8)
    at /merc/tools/src/openssh-2.3.0p1/kex.c:178
#3  0x209d8 in choose_dh (minbits=4096)
    at /merc/tools/src/openssh-2.3.0p1/dh.c:156
#4  0x1cbfc in ssh_dhgex_server (kex=0xdaa88, client_kexinit=0xdd250,
    server_kexinit=0xdd2b0) at /merc/tools/src/openssh-2.3.0p1/sshd.c:1511
#5  0x1c918 in do_ssh2_kex () at
/merc/tools/src/openssh-2.3.0p1/sshd.c:1332
#6  0x1c320 in main (ac=2, av=0xd2000)
    at /merc/tools/src/openssh-2.3.0p1/sshd.c:1084
(gdb)

Any ideas?

-- 
Edward S. Marshall <emarshall at mercantec.com>                 UNIX Administrator
http://www.nyx.net/~emarshal/                                   Mercantec, Inc.