incommon.pem causing `shibd -t` to seg fault

[Brian Tingle]

Not sure if this gdb backtrace might give someone a clue about what is happening to cause my `shibd -t` to seg fault.  Any random guesses of what to check appreciated.

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff4371c11 in BN_num_bits () from /apps/nuxeo/pkg/lib/libcrypto.so.1.0.0
(gdb) backtrace
#0  0x00007ffff4371c11 in BN_num_bits () from /apps/nuxeo/pkg/lib/libcrypto.so.1.0.0
#1  0x00007ffff439cd1d in RSA_size () from /apps/nuxeo/pkg/lib/libcrypto.so.1.0.0
#2  0x00007ffff69dae33 in xmltooling::BasicX509Credential::getKeySize() const () from /apps/nuxeo/workspace/test-home/lib/libxmltooling.so.6
#3  0x00007ffff69e25e8 in xmltooling::CredentialCriteria::matches(xmltooling::Credential const&) const () from /apps/nuxeo/workspace/test-home/lib/libxmltooling.so.6
#4  0x00007ffff69e4bf6 in xmltooling::FilesystemCredentialResolver::resolve(std::vector<xmltooling::Credential const*, std::allocator<xmltooling::Credential const*> >&, xmltooling::CredentialCriteria const*) const () from /apps/nuxeo/workspace/test-home/lib/libxmltooling.so.6
#5  0x00007ffff7381def in opensaml::saml2md::SignatureMetadataFilter::verifySignature(xmlsignature::Signature*, unsigned short const*) const () from /apps/nuxeo/workspace/test-home/lib/libsaml.so.8
#6  0x00007ffff7383c15 in opensaml::saml2md::SignatureMetadataFilter::doFilter(opensaml::saml2md::EntitiesDescriptor&, bool) const () from /apps/nuxeo/workspace/test-home/lib/libsaml.so.8
#7  0x00007ffff73841c6 in opensaml::saml2md::SignatureMetadataFilter::doFilter(xmltooling::XMLObject&) const () from /apps/nuxeo/workspace/test-home/lib/libsaml.so.8
#8  0x00007ffff7365f41 in opensaml::saml2md::MetadataProvider::doFilters(xmltooling::XMLObject&) const () from /apps/nuxeo/workspace/test-home/lib/libsaml.so.8
#9  0x00007ffff7388a09 in opensaml::saml2md::XMLMetadataProvider::load(bool) () from /apps/nuxeo/workspace/test-home/lib/libsaml.so.8
#10 0x00007ffff7387c6c in opensaml::saml2md::XMLMetadataProvider::background_load() () from /apps/nuxeo/workspace/test-home/lib/libsaml.so.8
#11 0x00007ffff738978d in opensaml::saml2md::XMLMetadataProvider::init() () from /apps/nuxeo/workspace/test-home/lib/libsaml.so.8
#12 0x00007ffff7ad83ce in (anonymous namespace)::XMLApplication::XMLApplication(shibsp::ServiceProvider const*, shibsp::ProtocolProvider const*, xercesc_3_1::DOMElement*, (anonymous namespace)::XMLApplication const*) () from /apps/nuxeo/workspace/test-home/lib/libshibsp.so.6
#13 0x00007ffff7adcec8 in (anonymous namespace)::XMLConfigImpl::XMLConfigImpl(xercesc_3_1::DOMElement const*, bool, (anonymous namespace)::XMLConfig*, log4shib::Category&) ()
   from /apps/nuxeo/workspace/test-home/lib/libshibsp.so.6
#14 0x00007ffff7ae0129 in (anonymous namespace)::XMLConfig::background_load() () from /apps/nuxeo/workspace/test-home/lib/libshibsp.so.6
#15 0x00007ffff7ac770d in (anonymous namespace)::XMLConfig::init() () from /apps/nuxeo/workspace/test-home/lib/libshibsp.so.6
#16 0x00007ffff7a224a7 in shibsp::SPConfig::instantiate(char const*, bool) () from /apps/nuxeo/workspace/test-home/lib/libshibsp.so.6
#17 0x0000000000401f4a in main ()


________________________________
From: Brian Tingle
Sent: Wednesday, June 11, 2014 10:26 PM
To: Shib Users
Subject: incommon.pem causing `shibd -t` to seg fault

Hi,

I'm trying to upgrade my SP from 2.5.2 to 2.5.3 and upgrade from openssl 0.9.8 to 1.0.1h.

When I use my old .../etc/... directory with my new SP and I `shibd -t` I get a segmentation fault.

When I `rm etc/shibboleth/incommon.pem` and then `shibd -t` I get

"overall configuration is loadable, check console for non-fatal problems" https://gist.github.com/tingletech/97ebe2b618634fa02147#file-no-incommon-pem-txt

Here is an strace of the seg fault https://gist.github.com/tingletech/97ebe2b618634fa02147#file-strace-txt

Does anyone have any thoughts on how I might try to debug this issue?

Thanks for any clues -- Brian

./xerces-c-3.1.1
./log4shib-1.0.8
./opensaml-2.5.3
./shibboleth-sp-2.5.3
./xml-security-c-1.7.2
./xmltooling-1.5.3
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140612/daafcb6d/attachment-0001.html