[Fwd: Bug in C_CloseAllSessions()]

[Darren J Moffat]

-------- Original Message --------
Subject: Bug in C_CloseAllSessions()
Date: Mon, 02 Jun 2008 14:18:39 -0700 (PDT)
From: Roy Arends <roy at nominet.org.uk>
To: security-discuss at opensolaris.org

I encountered a bug with the Metaslot. It seems that 
meta_release_slot_session (and others), used by C_CloseAllSessions, is 
causing a nasty segmentation fault when trying to close a certain amount 
of idle sessions. This is circumvented by closing individual sessions 
one by one.

Please find code that replicates the issue here:
http://download.nominet.org.uk/hsm-tools/hsm-tools.tar.gz
(The file is hsm-solaris-bug.c).

Run it as ./hsm-solaris-bug -p <pin> -s <slot> -t <sessions> label

Where label is a key in some token. slot is the slot number (defaults to 
0) and pin is the user pin for the token in the slot. If <sessions> is 
high, (in some configuration 101), there will be a segmentation fault.

I've blogged about the performance of the SCA6000 here:
http://blog.nominet.org.uk/tech/2008/06/02/40k-signatures-second-on-fips-140-2-level-3-hardware/


This message posted from opensolaris.org
_______________________________________________
security-discuss mailing list
security-discuss at opensolaris.org

-- 
Darren J Moffat