Segmentation fault after calling C_GenerateKeyPair, when finishing the key generation process

[fucicek23]

Problem Description

We are calling C_GenerateKeyPair from "opensc-pkcs11.so" by our system, but intermittently(but mostly) segmentation fault is thrown. When I check it by debugging my system, I saw this error in debugging logs: "malloc: Incorrect checksum for freed object 0x14b0c2040: probably modified after being freed."

After calling C_GenerateKeyPair, exception is thrown approximately after 1 minute.

Steps to reproduce

We call C_GenerateKeyPair from our system like this:

    CK_RV rv;
    {
        ScopedSystemTokenLocker locker;
	rv = pFunctionList_->C_GenerateKeyPair(session, &mechanism,
	                                       publicKeyTemplate, sizeof(publicKeyTemplate) / sizeof(CK_ATTRIBUTE),
	                                       privateKeyTemplate, sizeof(privateKeyTemplate) / sizeof(CK_ATTRIBUTE),
	                                       &publicKeyHandle, &privateKeyHandle);
    }

My version of OpenSC: OpenSC-0.20.0, rev: 45e2905, commit-time: 2019-12-29 13:42:06 +0100
My Operating System: Mac OS X Big Sur 11.1

Logs

Thread dump after crash is shown below:

0   libsystem_malloc.dylib        	0x00007fff2017528e tiny_free_list_remove_ptr + 255
1   libsystem_malloc.dylib        	0x00007fff20174748 tiny_free_no_lock + 1018
2   libsystem_malloc.dylib        	0x00007fff201741f9 free_tiny + 442
3   libopensc.6.dylib             	0x000000011e7ae1d3 pgp_calculate_and_store_fingerprint + 2627
4   libopensc.6.dylib             	0x000000011e7acbdf pgp_parse_and_set_pubkey_output + 1887
5   libopensc.6.dylib             	0x000000011e7aa2e1 pgp_gen_key + 2321
6   libopensc.6.dylib             	0x000000011e7a553c pgp_card_ctl + 460
7   libopensc.6.dylib             	0x000000011e726a7e sc_card_ctl + 158
8   libopensc.6.dylib             	0x000000011e93e06d openpgp_generate_key_rsa + 1405
9   libopensc.6.dylib             	0x000000011e93cd82 openpgp_generate_key + 162
10  libopensc.6.dylib             	0x000000011e8d7b9f sc_pkcs15init_generate_key + 2895
11  opensc-pkcs11.so              	0x000000011e51df2b pkcs15_gen_keypair + 2923
12  opensc-pkcs11.so              	0x000000011e50f3c5 C_GenerateKeyPair + 501

[frankmorgner]

please upgrade to 0.21.0 and try again

[fucicek23]

Hello, I upgraded but the issue still occurs.

[frankmorgner]

Can you create a debug log of 0.21.0, please?

[fucicek23]

debuglog.log
Log is added.

[fucicek23]

Hello, did you find some time to check the logs?

[frankmorgner]

I cannot immediately see where the problem is. above, you've printed some backtrace, could you do that with OpenSC debug symbols? That would show the exact problem. thank you.