Segmentation fault on Apache due to symbol clash with libasn1
ailin-nemui opened this issue · 7 comments
Program received signal SIGSEGV, Segmentation fault.
0x00007fa7a8922a80 in der_length_octet_string () from target:/usr/lib/x86_64-linux-gnu/libasn1.so.8
(gdb) bt
#0 0x00007fa7a8922a80 in der_length_octet_string () from target:/usr/lib/x86_64-linux-gnu/libasn1.so.8
#1 0x00007fa78b535ce4 in der_decode_custom_type_ex (
in=in@entry=0x55e4c009b1b0,
inlen=inlen@entry=86, root=root@entry=0x0, list=list@entry=0x7ffc49fcdf40, outlen=outlen@entry=4, flags=flags@entry=1)
at ltc/pk/asn1/der/custom_type/der_decode_custom_type.c:223
...
sadly it seems the library uses the wrong der_length_octet_string function, thus crashing the web server.
Frankly, I have no idea how to avoid this kind of name collision.
thanks for your response, I found this horrible workaround: https://github.com/AKSW/git_lfs_server_sshauth/#trouble-shooting
If Apache httpd crashes, there may be a symbol conflict between libasn1 and CryptX. You can re-install CryptX but this time like this, as a workaround:
export CFLAGS="-imacros $PWD/rename_symbols.inc" cpan -c CryptX cpan CryptX
This conflict is biting us, too, in a different way, with der_length_integer. But it’s the same phenomenon.
#79 is an attempted mitigation.
It looks like CryptX.so exports a whole bunch of symbols it doesn’t need to. (libasn1 seems to as well.) Renaming the functions seems like more a band-aid than a proper fix; the better course is to alter the build so that those functions aren’t exported.
@ailin-nemui: Try the latest upstream … is your problem addressed?
I believe that this is also now fixed as we merged #79
@ailin-nemui any chance you could confirm that this is fixed when using the last version from 574f1b5
should be fixed in CryptX-0.075_001
thanks, I tried 0.075_003 and it doesn't seem to crash Apache any more 👍