Bug#661010: remmina-plugin-rdp: Crush if conect to win 2008 server (SSL_read: Failure in SSL library)

[Stephan Seitz]

Package: libfreerdp1
Version: 1.0.1-1
Followup-For: Bug #661010

Hi!



stse@minas-ithil:~$ gdb --args /usr/bin/xfreerdp -d XXX -u stse -g 1280x800 -a 16 -z 
<server name>
GNU gdb (GDB) 7.4-debian
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/xfreerdp...Reading symbols from 
/usr/lib/debug/usr/bin/xfreerdp...(no debugging symbols found)...done.
(no debugging symbols found)...done.
(gdb) run
Starting program: /usr/bin/xfreerdp -d XXX -u stse -g 1280x800 -a 16 -z <server 
name>
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7ffff40f5700 (LWP 1969)]
connected to <server name>:3389

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff40f5700 (LWP 1969)]
0x00007ffff738c8dc in crypto_cert_subject_alt_name () from 
/usr/lib/libfreerdp-core.so.1.0
(gdb) bt
#0  0x00007ffff738c8dc in crypto_cert_subject_alt_name () from 
/usr/lib/libfreerdp-core.so.1.0
#1  0x00007ffff73a147b in tls_verify_certificate () from 
/usr/lib/libfreerdp-core.so.1.0
#2  0x00007ffff738ccb9 in credssp_get_public_key () from 
/usr/lib/libfreerdp-core.so.1.0
#3  0x00007ffff738d698 in credssp_authenticate () from 
/usr/lib/libfreerdp-core.so.1.0
#4  0x00007ffff73a2dba in transport_connect_nla () from 
/usr/lib/libfreerdp-core.so.1.0
#5  0x00007ffff739dd51 in rdp_client_connect () from 
/usr/lib/libfreerdp-core.so.1.0
#6  0x00007ffff7399664 in freerdp_connect () from 
/usr/lib/libfreerdp-core.so.1.0
#7  0x0000000000410aac in xfreerdp_run ()
#8  0x0000000000410d7c in thread_func ()
#9  0x00007ffff536db50 in start_thread () from 
/lib/x86_64-linux-gnu/libpthread.so.0
#10 0x00007ffff50b890d in clone () from /lib/x86_64-linux-gnu/libc.so.6
#11 0x0000000000000000 in ?? ()



I get the same seg fault if I use an IP address.

It works if I disable network level authentication with --no-nla.

Shade and sweet water!

        Stephan

-- System Information:
Debian Release: wheezy/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.9-Dom0 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libfreerdp1 depends on:
ii  libc6        2.13-27
ii  libssl1.0.0  1.0.0g-1
ii  libx11-6     2:1.4.4-4
ii  libxkbfile1  1:1.0.7-1
ii  zlib1g       1:1.2.6.dfsg-2

libfreerdp1 recommends no packages.

Versions of packages libfreerdp1 suggests:
pn  xfreerdp  <none>

-- no debconf information

--
| Stephan Seitz             E-Mail: s...@fsing.rootsland.net |
| PGP Public Keys: http://fsing.rootsland.net/~stse/pgp.html |

Trying to connect to a Windows 2008 terminal server with an X.509 certificate this verion of xfreerdp produces a segmentation fault. Password: (gdb)

smime.p7s
Description: S/MIME cryptographic signature