Bug in C_CloseAllSessions()
Anthony Scarpino
anthony.scarpino at sun.com
Wed Jun 11 09:54:28 PDT 2008
Roy Arends wrote:
> I encountered a bug with the Metaslot. It seems that
> meta_release_slot_session (and others), used by C_CloseAllSessions,
> is causing a nasty segmentation fault when trying to close a certain
> amount of idle sessions. This is circumvented by closing individual
> sessions one by one.
>
> Please find code that replicates the issue here:
> http://download.nominet.org.uk/hsm-tools/hsm-tools.tar.gz (The file
> is hsm-solaris-bug.c).
>
> Run it as ./hsm-solaris-bug -p <pin> -s <slot> -t <sessions> label
>
> Where label is a key in some token. slot is the slot number (defaults
> to 0) and pin is the user pin for the token in the slot. If
> <sessions> is high, (in some configuration 101), there will be a
> segmentation fault.
>
> I've blogged about the performance of the SCA6000 here:
> http://blog.nominet.org.uk/tech/2008/06/02/40k-signatures-second-on-fips-140-2-level-3-hardware/
>
Do you have a stack trace of this problem?.. I've been able to run your
program, but the core dump I am seeing is occurring during C_Finalize
involving objects.. I didn't see anything with sessions.. I also had to
use 1000 sessions..101 worked fine..
Also, to verify, during this test you are using the SCA6000 as a
keystore correct? You set the
METASLOT_OBJECTSTORE_TOKEN environment variable or set it in 'cryptoadm
metaslot'?
thanks
Tony
More information about the crypto-discuss
mailing list