After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 63026 - SSL webpages cause reproducible crash
SSL webpages cause reproducible crash
Status: VERIFIED INCOMPLETE
Product: galeon
Classification: Deprecated
Component: Mozilla interaction
0.x
Other Solaris
: Normal major
: ---
Assigned To: Philip Langdale
Philip Langdale
Depends on:
Blocks:
 
 
Reported: 2001-10-25 17:40 UTC by kph
Modified: 2009-08-15 18:40 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description kph 2001-10-25 17:40:48 UTC
Using Galeon 0.12.5, linked against Mozilla 0.9.5, the modssl.org browser
test webpage at https://www.modssl.org/example/test.phtml causes a
reproducible crash.

I can visit the above webpage just fine with the Mozilla I'm linking
against.  It returns data about the SSL connection that that Mozilla
creates, so I know SSL works in that Mozilla.

The GNOME libraries I'm using are the ones released by Sun, if you need to
know that.  Both Mozilla and galeon were built by yours truly from source,
using gcc 2.95.2.  This is the first time I've used galeon, so there were
no old/stale preferences to get in the way.

At the bottom is the stack trace; I'm not sure how useful it will be to
you, since the mozilla libraries don't have any debugging symbols.  This is
also clearly just one thread, and I'm not sure how to get more information
from the core dump as to what the other threads were doing at the time.

If you need more information, please e-mail me, and I'll certainly do
whatever I'm able to help fix this problem...

  • #0 CERT_CheckKeyUsage
  • #1 CERT_VerifyCert
  • #2 CERT_VerifyCertNow
  • #3 SSL_AuthCertificate
  • #4 AuthCertificateCallback
  • #5 ssl3_HandleV2ClientHello
  • #6 ssl3_RestartHandshakeAfterServerCert
  • #7 ssl3_RestartHandshakeAfterServerCert
  • #8 ssl3_HandleRecord
  • #9 ssl3_GatherCompleteHandshake
  • #10 ssl_GatherRecord1stHandshake
  • #11 ssl_Do1stHandshake
  • #12 ssl_SecureSend
  • #13 ssl_SecureWrite
  • #14 SSL_ImportFD
  • #15 displayAlert
  • #16 PR_Write
  • #17 nsSocketOS::Write
  • #18 nsSocketOS::WriteFromSegments
  • #19 ConstCharImpl::ReadSegments
  • #20 nsSocketOS::WriteFrom
  • #21 nsHttpTransaction::OnDataWritable
  • #22 nsHttpConnection::OnDataWritable
  • #23 nsSocketWriteRequest::OnWrite
  • #24 nsSocketTransport::doReadWrite
  • #25 nsSocketTransport::Process
  • #26 nsSocketTransportService::Run
  • #27 nsThread::Main
  • #28 PR_Select

Comment 1 Marco Pesenti Gritti 2001-10-27 09:03:57 UTC
I cannot reproduce this one
Comment 2 Marco Pesenti Gritti 2001-11-01 14:22:31 UTC
do you have a .galeon/mozilla/galeon directory ?
Comment 3 kph 2001-11-01 18:11:04 UTC
Yes.  See the listing below:

[63] kph@cicero:~ > ls -l ~/.galeon/mozilla/galeon/
total 206
drwxr-xr-x   2 kph      acstuds     6144 Oct 29 18:33 Cache
drwxr-xr-x   3 kph      acstuds      512 Oct 24 16:41 US
-rw-r--r--   1 kph      acstuds     5757 Oct 24 16:41 bookmarks.html
-rw-------   1 kph      acstuds    32768 Oct 24 16:41 cert7.db
drwxr-xr-x   2 kph      acstuds      512 Oct 24 16:41 chrome
-rw-r--r--   1 kph      acstuds     1329 Oct 29 18:33 cookies.txt
-rw-------   1 kph      acstuds    32768 Oct 24 16:41 key3.db
-rw-r--r--   1 kph      acstuds     6092 Oct 24 16:41 localstore.rdf
-rw-r--r--   1 kph      acstuds     1080 Oct 24 16:41 mimeTypes.rdf
-rw-r--r--   1 kph      acstuds     2169 Oct 24 16:41 panels.rdf
-rw-r--r--   1 kph      acstuds      731 Oct 29 18:37 prefs.js
-rwxr-xr-x   1 kph      acstuds     2335 Oct 24 16:41 search.rdf
-rw-------   1 kph      acstuds    40960 Oct 24 16:41 secmod.db
Comment 4 Marco Pesenti Gritti 2001-11-03 09:06:18 UTC
can you try to galeon-config-tool --clean or to run with a new user ?
Also please try to run with root
Comment 5 kph 2001-11-05 21:55:35 UTC
The stack trace changes for 0.12.6 to the following:

  • #0 CERT_CheckKeyUsage
  • #1 CERT_VerifyCert
  • #2 CERT_VerifyCertNow
  • #3 SSL_AuthCertificate
  • #4 AuthCertificateCallback
  • #5 ssl3_HandleV2ClientHello
  • #6 ssl3_RestartHandshakeAfterServerCert
  • #7 ssl3_RestartHandshakeAfterServerCert
  • #8 ssl3_HandleRecord
  • #9 ssl3_GatherCompleteHandshake
  • #10 ssl_GatherRecord1stHandshake
  • #11 ssl_Do1stHandshake
  • #12 ssl_SecureRecv
  • #13 ssl_SecureRead
  • #14 SSL_ImportFD
  • #15 displayAlert
  • #16 PR_Read
  • #17 nsSocketIS::Read
  • #18 nsHttpTransaction::Read
  • #19 nsPipe::nsPipeOutputStream::Flush
  • #20 nsPipe::nsPipeOutputStream::WriteSegments
  • #21 nsPipe::nsPipeOutputStream::WriteFrom
  • #22 nsStreamListenerProxy::OnDataAvailable
  • #23 nsHttpTransaction::OnDataReadable
  • #24 nsHttpConnection::OnDataAvailable
  • #25 nsSocketReadRequest::OnRead
  • #26 nsSocketTransport::doReadWrite
  • #27 nsSocketTransport::Process
  • #28 nsSocketTransportService::Run
  • #29 nsThread::Main
  • #30 PR_Select

This occurs when I run it as a user who just logged in to GNOME for
the first time, and had thus never run galeon before -- as well as
when I use my normal user account.
Comment 6 red_one 2001-11-11 12:58:32 UTC
does not segfault here
galeon 0.12.7
debian-sid
linux 2.4.14
384mb ram
mozilla-browser 0.9.5-5  
Comment 7 Yanko Kaneti 2001-11-11 17:44:21 UTC
i wont be surprised if its Solaris specific
Comment 8 Philip Langdale 2001-11-11 18:03:06 UTC
Very likely to be a solaris issue. psm on solarais was a bit behind
in the past, don't know about now.

This site has a non-standard cert, so it's possible that the displaying
of the cert confirmation dialog is the problem; one which we had a
long time ago. Can you try visiting a site which uses a trusted cert
and see if you still have problems?
Comment 9 kph 2001-11-11 18:22:37 UTC
I recall that the PSM on Solaris was behind when it was a separate
package, but now that it's integrated into the tree it shouldn't be. 
Especially not since I built the whole thing.

And besides, the page works perfectly in Mozilla, leading me to
believe it's _not_ a Mozilla issue.

Yes, the same segfault and stack trace occurs on

https://www.firstunion.com/FrontLineLogin.html

which has a cert issued by RSA Data Security, Inc.  Similarly at
amazon.com.
 
Strangely enough, on

https://www.mail.duke.edu/silkymail/imp/login.php3

(cert issued by Thawte), it doesn't crash, it just does absolutely
nothing.  Similarly with https://webacct.acpub.duke.edu.  

Mozilla (again, the same one this galeon is linked against) displays
all these pages with only the standard entering-a-secure-page
complaint.

I'll try 0.12.7 at work tomorrow.

Comment 10 Yanko Kaneti 2001-11-11 18:39:34 UTC
in any case its a crash in mozilla and its embedding , try
TestGtkEmbed from moz sources and file a bug in bugzilla.mozilla.org
Comment 11 kph 2001-11-11 20:03:05 UTC
Nope, all of the aforementioned pages are viewable with no problems in
TestGtkEmbed.
Comment 12 Yanko Kaneti 2001-11-11 20:16:37 UTC
you mean the certificat dialog popus up without difficulties ?
and you confirm and so on...?
Comment 13 Yanko Kaneti 2001-11-11 20:17:40 UTC
sorry for the spam but have you tried removing your .galeon/mozilla
directory
Comment 14 kph 2001-11-11 20:29:18 UTC
Yes.  The dialogs pop up just fine, I confirm, it displays the pages. 
I didn't actually examine the certificate, because I'd seen it before,
but I did get that option.

Since this happened to a user who was running galeon for the first
time, I'm convinced that removing my .galeon/mozilla directory would
not solve anything.  See the comments with the second stack trace.
Comment 15 Philip Langdale 2002-04-20 00:39:02 UTC
Has this bug been invalided by the months that have passed? NEEDINFO
until I know it's still an issue.
Comment 16 Yanko Kaneti 2002-12-11 13:59:33 UTC
Please reopen if this is still valid. This bug is too old.
Comment 17 Bugzilla Maintainers 2004-04-01 23:44:57 UTC
The URL field has been removed from bugzilla.gnome.org. This URL was in the old URL field, and is being added as a comment so that the data is not lost. Please email bugmaster@gnome.org if you have any questions.

URL: 
https://www.modssl.org/example/test.phtml