Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-7772

SIGSEGV on my_aes_encrypt_cbc when -DWITH_SSL=bundled

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 10.1.3
    • 10.1.4
    • Encryption
    • None

    Description

      • Read/Write outside of buffer at memcpy(); yaSSL related
      • OPENSSL_assert(EVP_CIPHER_CTX_iv_length(&ctx.ctx) == iv_length); // ECB does not use IV, thus incorrect assertion

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-7450 file_example_key_management_plugin and example_key_management_plugin don't work with yassl

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            jplindst Jan Lindström (Inactive) created issue -
            jplindst Jan Lindström (Inactive) added a comment -

            How to repeat:

            • Build with cmake . -DCMAKE_BUILD_TYPE=Debug -DWITH_SSL=bundled
            • ./mysql-test-run --vardir=/dev/shm innodb-page_encryption_log_encryption
            jplindst Jan Lindström (Inactive) added a comment - How to repeat: Build with cmake . -DCMAKE_BUILD_TYPE=Debug -DWITH_SSL=bundled ./mysql-test-run --vardir=/dev/shm innodb-page_encryption_log_encryption
            serg Sergei Golubchik made changes -
            Field Original Value New Value
            Component/s Encryption [ 11200 ]
            serg Sergei Golubchik made changes -
            Component/s SSL [ 10112 ]
            serg Sergei Golubchik made changes -
            jplindst Jan Lindström (Inactive) made changes -
            Description Read/Write outside of buffer at memcpy(); * Read/Write outside of buffer at memcpy(); yaSSL related
            * OPENSSL_assert(EVP_CIPHER_CTX_iv_length(&ctx.ctx) == iv_length); // ECB does not use IV, thus incorrect assertion
            jplindst Jan Lindström (Inactive) added a comment - - edited

            Added:

            • mysql-test/include/have_file_key_management_plugin.combinations ( to run with aes_cbc and aes_ecb)
            • mysql-test/include/have_openssl_ctr.combinations ( to run with aes_cbc, aes_ecb and aes_ctr)
            jplindst Jan Lindström (Inactive) added a comment - - edited Added: mysql-test/include/have_file_key_management_plugin.combinations ( to run with aes_cbc and aes_ecb) mysql-test/include/have_openssl_ctr.combinations ( to run with aes_cbc, aes_ecb and aes_ctr)
            jplindst Jan Lindström (Inactive) added a comment -

            http://lists.askmonty.org/pipermail/commits/2015-March/007584.html

            InnoDB/XtraDB changes are trivial fixes for newer compilers (C++11).

            jplindst Jan Lindström (Inactive) added a comment - http://lists.askmonty.org/pipermail/commits/2015-March/007584.html InnoDB/XtraDB changes are trivial fixes for newer compilers (C++11).
            jplindst Jan Lindström (Inactive) added a comment -

            No need to review InnoDB/XtraDB changes.

            jplindst Jan Lindström (Inactive) added a comment - No need to review InnoDB/XtraDB changes.
            jplindst Jan Lindström (Inactive) made changes -
            Assignee Jan Lindström [ jplindst ] Sergei Golubchik [ serg ]
            Status Open [ 1 ] In Review [ 10002 ]
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Jan Lindström [ jplindst ]
            Status In Review [ 10002 ] Stalled [ 10000 ]
            jplindst Jan Lindström (Inactive) made changes -
            Status Stalled [ 10000 ] In Progress [ 3 ]
            jplindst Jan Lindström (Inactive) added a comment -

            commit a3e68b4a558e1dd0ff61e497316cb6a32d3de410
            Author: Jan Lindström <jan.lindstrom@mariadb.com>
            Date: Fri Mar 13 14:18:07 2015 +0200

            MDEV-7772: SIGSEGV on my_aes_encrypt_cbc when -DWITH_SSL=bundled

            Two problems:

            • Read/Write outside of buffer at memcpy() because of incorrect parameters
              . OPENSSL_assert(EVP_CIPHER_CTX_iv_length(&ctx.ctx) == iv_length); // ECB does not use IV, thus incorrect assertion

            Added:
            mysql-test/include/encryption_algorithms.combinations to run tests with methods cbc, ecb and ctr in those systems where they are available (see suite.pm).

            jplindst Jan Lindström (Inactive) added a comment - commit a3e68b4a558e1dd0ff61e497316cb6a32d3de410 Author: Jan Lindström <jan.lindstrom@mariadb.com> Date: Fri Mar 13 14:18:07 2015 +0200 MDEV-7772 : SIGSEGV on my_aes_encrypt_cbc when -DWITH_SSL=bundled Two problems: Read/Write outside of buffer at memcpy() because of incorrect parameters . OPENSSL_assert(EVP_CIPHER_CTX_iv_length(&ctx.ctx) == iv_length); // ECB does not use IV, thus incorrect assertion Added: mysql-test/include/encryption_algorithms.combinations to run tests with methods cbc, ecb and ctr in those systems where they are available (see suite.pm).
            jplindst Jan Lindström (Inactive) made changes -
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Closed [ 6 ]
            ratzpo Rasmus Johansson (Inactive) made changes -
            Workflow MariaDB v2 [ 60109 ] MariaDB v3 [ 64871 ]
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 64871 ] MariaDB v4 [ 148892 ]

            People

              jplindst Jan Lindström (Inactive)
              jplindst Jan Lindström (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.