[Bug 1921518] Re: OpenSSL "double free" error

[Vladimir Sokolovsky]

Also libssl1.1-udeb depends on libc6-udeb which is not available:

# dpkg -i libssl1.1-udeb_1.1.1f-1ubuntu2.6_arm64.udeb
(Reading database ... 128018 files and directories currently installed.)
Preparing to unpack libssl1.1-udeb_1.1.1f-1ubuntu2.6_arm64.udeb ...
Unpacking libssl1.1-udeb (1.1.1f-1ubuntu2.6) over (1.1.1f-1ubuntu2.6) ...
dpkg: dependency problems prevent configuration of libssl1.1-udeb:
 libssl1.1-udeb depends on libc6-udeb (>= 2.31); however:
  Package libc6-udeb is not installed.

dpkg: error processing package libssl1.1-udeb (--install):
 dependency problems - leaving unconfigured
Errors were encountered while processing:
 libssl1.1-udeb

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1921518

Title:
  OpenSSL "double free" error

Status in openssl package in Ubuntu:
  Incomplete
Status in openssl source package in Focal:
  Incomplete

Bug description:
  "double free" error is seen when using curl utility. Error is from
  libcrypto.so which is part of the OpenSSL package. This happens only
  when OpenSSL is configured to use a dynamic engine.

  OpenSSL version is 1.1.1f

  The issue is not encountered if
  http://www.openssl.org/source/openssl-1.1.1f.tar.gz is used instead.

  
  OpenSSL can be configured to use a dynamic engine by editing the default openssl config file which is located at '/etc/ssl/openssl.cnf' on Ubuntu systems.

  On Bluefield systems, config diff to enable PKA dynamic engine, is as
  below:

  +openssl_conf = conf_section
  +
   # Extra OBJECT IDENTIFIER info:
   #oid_file              = $ENV::HOME/.oid
   oid_section            = new_oids
   
  +[ conf_section ]
  +engines = engine_section
  +
  +[ engine_section ]
  +bf = bf_section
  +
  +[ bf_section ]
  +engine_id=pka
  +dynamic_path=/usr/lib/aarch64-linux-gnu/engines-1.1/pka.so
  +init=0
  +

  engine_id above refers to dynamic engine name/identifier.
  dynamic_path points to the .so file for the dynamic engine.

  # curl -O https://tpo.pe/pathogen.vim

  double free or corruption (out)

  Aborted (core dumped)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1921518/+subscriptions