Bug#526307: SIGSEGV in sexp_sscan()

[Joachim Breitner]

Package: libgcrypt11
Version: 1.4.4-2
Severity: important

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

this bug is grave for me: When I start pidgin, I get a SIGSEGV:

(private key is XX’ed)

$ gdb pidgin
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(gdb) run
Starting program: /usr/bin/pidgin 
[Thread debugging using libthread_db enabled]
[New Thread 0x7f4b950927d0 (LWP 6264)]
warning: Lowest section in /usr/lib/libicudata.so.40 is .hash at 0000000000000120

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f4b950927d0 (LWP 6264)]
0x00007f4b78196f80 in ?? ()
(gdb) bt
#0  0x00007f4b78196f80 in ?? ()
#1  0x00007f4b8ae43ad0 in sexp_sscan (retsexp=0x7fff9d1cbde0, erroff=0x7fff9d1cbd60, 
    buffer=0x22507b0 "(privkeys\n (account\n(name \"74513189\")\n(protocol prpl-icq)\n(private-key \n (dsa \n  (p #XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX..., length=2975, argflag=0, 
    arg_ptr=0x7fff9d1cbdc0, arg_list=0x0) at sexp.c:1045
#2  0x00007f4b8ae4508d in _gcry_sexp_create (retsexp=0x7fff9d1cbf40, 
    buffer=0x22507b0, length=<value optimized out>, autodetect=<value optimized out>, 
    freefnc=0) at sexp.c:234
#3  0x00007f4b8ac2804a in otrl_privkey_read_FILEp () from /usr/lib/libotr.so.2
#4  0x00007f4b8b0b6193 in ?? () from /usr/lib/pidgin/pidgin-otr.so
#5  0x00007f4b921f0dac in purple_plugin_load (plugin=0x1b9fdd0)
    at ../../libpurple/plugin.c:616
#6  0x00007f4b921f1881 in purple_plugins_load_saved (key=<value optimized out>)
    at ../../libpurple/plugin.c:1307
#7  0x000000000047d3d7 in main (argc=1, argv=0x7fff9d1ce468)
    at ../../pidgin/gtkmain.c:800
(gdb) 


Not sure what do with it, though, I hope you can identify the bug.

Greetings,
Joachim

- -- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.29-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libgcrypt11 depends on:
ii  libc6                         2.9-8      GNU C Library: Shared libraries
ii  libgpg-error0                 1.6-1      library for common error values an

libgcrypt11 recommends no packages.

Versions of packages libgcrypt11 suggests:
pn  rng-tools                     <none>     (no description available)

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkn5c4IACgkQ9ijrk0dDIGzAVQCfeTrI+xjmQ6AEzj3GAknVuUi3
6z8An1eqzLS24uw/V6AvsMrTyzU6cZui
=uEaU
-----END PGP SIGNATURE-----