View Issue Details

IDProjectCategoryView StatusLast Update
0003479GNUnetcadet servicepublic2014-07-02 21:31
ReporterBart PolotAssigned ToBart Polot 
PriorityurgentSeveritycrashReproducibilityrandom
Status closedResolutionfixed 
Product VersionSVN HEAD 
Target Version0.11.0pre66Fixed in Version0.11.0pre66 
Summary0003479: CADET crashes during KX.
Descriptionwarning: Source file is more recent than executable.
1874 t_decrypt (t, &challenge, &msg->nonce, sizeof (uint32_t), msg->iv);
(gdb) bt
#0 0x0000000000408f0a in handle_pong (t=0x1abfbf0, msg=0x7fffddf7c698) at gnunet-service-cadet_tunnel.c:1874
#1 0x0000000000409748 in GCT_handle_kx (t=0x1abfbf0, message=0x7fffddf7c698) at gnunet-service-cadet_tunnel.c:2046
#2 0x00000000004142f3 in handle_cadet_kx (peer=0x7fffddf7c654, msg=0x7fffddf7c674)
    at gnunet-service-cadet_connection.c:2116
#3 0x00000000004144b5 in GCC_handle_kx (cls=0x0, peer=0x7fffddf7c654, message=0x7fffddf7c674)
    at gnunet-service-cadet_connection.c:2162
#4 0x00007f0d93eb1bbd in main_notify_handler (cls=0x1aa84d0, msg=0x7fffddf7c650) at core_api.c:944
#5 0x00007f0d942dadc2 in receive_task (cls=0x1aae800, tc=0x7fffddf7c780) at client.c:595
#6 0x00007f0d94317076 in run_ready (rs=0x1aac330, ws=0x1aac3c0) at scheduler.c:595
#7 0x00007f0d9431791d in GNUNET_SCHEDULER_run (task=0x7f0d94323c62 <service_task>, task_cls=0x7fffddf7cb00)
    at scheduler.c:817
#8 0x00007f0d94325a1d in GNUNET_SERVICE_run (argc=3, argv=0x7fffddf7cd98,
    service_name=0x43396a "tarting to run\n", options=GNUNET_SERVICE_OPTION_NONE,
    task=0x42d4b0 <shutdown_task+307>, task_cls=0x0) at service.c:1498
#9 0x000000000042d838 in main (argc=3, argv=0x7fffddf7cd98) at gnunet-service-cadet.c:175
(gdb) p *t
$1 = {peer = 0x1abf6a0, cstate = CADET_TUNNEL_READY, estate = CADET_TUNNEL_KEY_REKEY, kx_ctx = 0x0,
  peers_ephemeral_key = {q_y = "쌿\260A\270M3@\324\255\203\366\322!jX1\276\004s{\276\006\063\372Ь\267ܵp"},
  e_key = {
    aes_key = "\265\065\320\357w\270U\006p\237\004\227\321\370f\330\026\225z\005&\260ik_\266\204I\270B\307", <incomplete sequence \364>,
    twofish_key = "\225\261\001a\375TBXS\274\370\341\023\366\067\200z:\264&\271C\315\t:g\017v", <incomplete sequence \367\277\220>}, d_key = {
    aes_key = "\207w\317\317ʊ\225\250\323\021\364V(w\260\311Y\311d\367I\315\355G\201\230\200;隫K",
    twofish_key = "7\237\320n\372s\211,\350%^\270m\375\204\357\262\374\214G\033\"ū\026\272@\030\020\027g\037"},
  rekey_task = 34656, connection_head = 0x1abf1a0, connection_tail = 0x1abf1a0, next_cid = 0,
  channel_head = 0x1abe670, channel_tail = 0x1abe670, next_chid = 1073741825, destroy_task = 0, tq_head = 0x0,
  tq_tail = 0x0}
(gdb)

Crash is most certainly in line 1876 in svn HEAD:
if (challenge != t->kx_ctx->challenge)
Additional Informationt->kx_ctx is NULL, but e_state is still REKEY.
TagsNo tags attached.

Activities

Bart Polot

2014-07-02 21:31

manager   ~0008498

Fixed in r33905+.

Issue History

Date Modified Username Field Change
2014-07-02 12:57 Bart Polot New Issue
2014-07-02 12:57 Bart Polot Status new => assigned
2014-07-02 12:57 Bart Polot Assigned To => Bart Polot
2014-07-02 21:31 Bart Polot Note Added: 0008498
2014-07-02 21:31 Bart Polot Status assigned => closed
2014-07-02 21:31 Bart Polot Resolution open => fixed
2014-07-02 21:31 Bart Polot Fixed in Version => 0.11.0pre66