View Issue Details

IDProjectCategoryView StatusLast Update
0001803unrealircdpublic2004-05-13 10:53
Reporteraquanight Assigned To 
PrioritynormalSeveritycrashReproducibilityN/A
Status closedResolutionopen 
Product Version3.2 
Summary0001803: wIRCd crashes when trying to use oper cert.
Descriptionoper SomeOp {
    from {
       userhost *@*;
    };
    flags {
       global;
    };
    password "aquanight.pem" { sslclientcert; };
};

I put the .pem in the ircd folder, and when I rehashed, it cored.
Additional InformationThis was a hand-compiled wIRCd using:
Windows XP Professional SP1
OpenSSL 0.9.7d
LibCurl (don't know the version off hand, but I'm sure it's the latest binary for windows ;) ).
ZLib (think it's the same version that comes in the installer).
Visual C++ .NET 2003 (no I didn't use /clr ;) ).

I'm posting this at school, so I don't have the .core file at hand. Of course, in the time it took me to remove the oper block, the ircd cored a lot since SCM was trying to restart it ;) . When I get home, I'll fish out the first core and post it.
3rd party modules

Activities

aquanight

2004-05-10 18:11

reporter   ~0006155

*corefile added*

syzop

2004-05-11 11:44

administrator   ~0006164

Can you reproduce it with the official win ssl version?
[Hm site is down, can't remember the url from the top of my head, but if it's still down when you read it, then try http://www.vulnscan.org/UnrealIrcd/win_cvs_download.php?f=Unreal3.2-cvs20040510.exe]
Coz sometimes this stuff can be related to how SSL was compiled, so just try to see if it's that ;).

aquanight

2004-05-11 19:19

reporter   ~0006173

Yes, I'll try it today. I'll probably have the results tomorrow at the earliest. If I remember ;)

(BTW: I did use OpenSSL to make the cert, if that affects anything. If that explains the crash, then at least thanks for giving me an excuse to get the latest CVS ;) .)

aquanight

2004-05-13 09:41

reporter   ~0006230

Okay, I've got the results for you:

Using the official distro as it was, I was unable to reproduce the crash.

I then tried replacing the official distro's wircd.exe with the hand-compiled one (I had compiled in some modules I wanted to try out) and again I was unable to reproduce the crash.

So, it looks like this could be in OpenSSL then. ;)

syzop

2004-05-13 10:53

administrator   ~0006235

Ok, no problem :).

On a sidenote, we usually edit ms\ntdll.mak in openssl and use /ML to get rid of those stupid vc7 dll requirements, perhaps it helps.

Issue History

Date Modified Username Field Change
2004-05-10 13:38 aquanight New Issue
2004-05-10 18:11 aquanight File Added: wircd.1312.core
2004-05-10 18:11 aquanight Note Added: 0006155
2004-05-11 11:44 syzop Note Added: 0006164
2004-05-11 19:19 aquanight Note Added: 0006173
2004-05-13 09:41 aquanight Note Added: 0006230
2004-05-13 10:53 syzop Status new => closed
2004-05-13 10:53 syzop Note Added: 0006235