SP Crashing

[Cantor, Scott]

On 9/25/19, 10:25 PM, "Dan McLaughlin" <dmclaughlin at tech-consortium.com> wrote:

> I finally was able to capture a full heap dump during a crash using the Debug Diagnostics Tool. Not sure if this is
> helpful at all..

The list has a message limit, but I got it via list owner, and yes, it helps enormously.

It confirms there's a bug in either the SP's code using the GCM encryption support in Santuario or the Santuario support for that algorithm which I had to completely wing since OpenSSL's documentation consists of its source code. Both are a possibility since GCM is never seen in SAML due to the lack of support outside Shibboleth.

This confirms that the crash is happening due to the use of the new cookie recovery feature, and that's exactly what I assumed. I don't know how to load test that code easily at this point, but please file a bug and attach that dump image and I can at least start the process of eyeballing code.

Your only fix at this point is just not using that feature for the time being.

I greatly, greatly appreciate the time you spent to bottom this out, it's sincerely a big help given the small amount of time I have to spend on the SP.

-- Scott