|
Description
|
Under some circumstances, invocations of elfsign to sign
or verify, where the certificate path provided refers to
a non-existant object, can result in a core dump.
The tests elfsign_006 and elfsign_013 in the stc2 ef test
suite make such invocations.
This will always happen with libumem debugging options.
LD_PRELOAD=libumem.so \
UMEM_DEBUG=default,audit=30 \
UMEM_LOGGING=transaction=512k \
elfsign verify -v -c /nosuchcert -e /usr/bin/elfsign
While analyzing this bug, I came across a couple of
other cases of poorly generated or checked error codes,
particularly in usr/src/cmd/cmd-crypt/elfsign/elfsign.c's
getelfobj() and setcertpath().
|
