[MacPorts] #64036: SoftHSMv2 port causes free-after-free
MacPorts
noreply at macports.org
Thu Dec 16 13:44:01 UTC 2021
#64036: SoftHSMv2 port causes free-after-free
-------------------------+--------------------
Reporter: mouse07410 | Owner: (none)
Type: defect | Status: new
Priority: Normal | Milestone:
Component: ports | Version:
Resolution: | Keywords:
Port: softhsm |
-------------------------+--------------------
Comment (by mouse07410):
> I'd like to reproduce the issue without having to be in the process of
recompiling some other package, which is what I think you were doing
there.
Yes, I'm recompiling libp11, as I'm on its master branch. But the problem
does seem to be with SOftHSMv2 - as demonstrated by successful run after
replacing Macports softhsm with the "home-build" one.
> Would it be possible for you to come up with a reproduction of the issue
with just what one can install directly from MacPorts today, plus any
command-line actions are necessary?
I'd love to, but I doubt that...
> I realise your example required multiple openssl engines and that you
were using a Yubikey HSM for your second one; I don't have one of those
but I do have a Nitrokey HSM hard token that I think I can substitute.
Yes, the nature of the other HSM should not matter. As long as they both
use PKCS#11 and libp11, it should be sufficient.
> . . . the default openssl installed by MacPorts is now 3.0.0, and the
versions of softhsm and libp11 installed now use that.
Does not matter. The Macports-installed version of SoftHSMv2 reported in
the ticket was 3.0.0-based, as I recall - and the crash report (in the
quoted libp11 issue) seems to confirm it.
--
Ticket URL: <https://trac.macports.org/ticket/64036#comment:8>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list