[MacPorts] #64036: SoftHSMv2 port causes free-after-free

MacPorts noreply at macports.org
Thu Dec 16 13:44:01 UTC 2021


#64036: SoftHSMv2 port causes free-after-free
-------------------------+--------------------
  Reporter:  mouse07410  |      Owner:  (none)
      Type:  defect      |     Status:  new
  Priority:  Normal      |  Milestone:
 Component:  ports       |    Version:
Resolution:              |   Keywords:
      Port:  softhsm     |
-------------------------+--------------------

Comment (by mouse07410):

 > I'd like to reproduce the issue without having to be in the process of
 recompiling some other package, which is what I think you were doing
 there.

 Yes, I'm recompiling libp11, as I'm on its master branch. But the problem
 does seem to be with SOftHSMv2 - as demonstrated by successful run after
 replacing Macports softhsm with the "home-build" one.

 > Would it be possible for you to come up with a reproduction of the issue
 with just what one can install directly from MacPorts today, plus any
 command-line actions are necessary?

 I'd love to, but I doubt that...

 > I realise your example required multiple openssl engines and that you
 were using a Yubikey HSM for your second one; I don't have one of those
 but I do have a Nitrokey HSM hard token that I think I can substitute.

 Yes, the nature of the other HSM should not matter. As long as they both
 use PKCS#11 and libp11, it should be sufficient.

 > .  .  .  the default openssl installed by MacPorts is now 3.0.0, and the
 versions of softhsm and libp11 installed now use that.

 Does not matter. The Macports-installed version of SoftHSMv2 reported in
 the ticket was 3.0.0-based, as I recall - and the crash report (in the
 quoted libp11 issue) seems to confirm it.

-- 
Ticket URL: <https://trac.macports.org/ticket/64036#comment:8>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list