[39561] in Kerberos
Re: Failing ASN.1 tests with PKINIT on HP-UX
daemon@ATHENA.MIT.EDU (Osipov, Michael \(IN IT IN\) via K)
Sun Sep 28 07:37:35 2025
Message-ID: <32a0623a-5808-4391-9a04-ae7c5c176bba@innomotics.com>
Date: Sun, 28 Sep 2025 13:36:13 +0200
Content-Language: en-US
To: Greg Hudson <ghudson@mit.edu>, Kerberos@mit.edu
In-Reply-To: <7bb38cb7-0d12-4612-aff5-e455484bb9ef@mit.edu>
MIME-Version: 1.0
From: "Osipov, Michael \(IN IT IN\) via Kerberos" <kerberos@mit.edu>
Reply-To: "Osipov, Michael \(IN IT IN\)" <michael.osipov@innomotics.com>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
On 2025-09-28 07:21, Greg Hudson wrote:
> On 9/27/25 06:17, Osipov, Michael (IN IT IN) via Kerberos wrote:
>>> (gdb) where
>>> #0 0x60000000c8a788d0:0 in get_tag () at asn1_encode.c:370
>>> #1 0x60000000c8a79f70:0 in split_der () at asn1_encode.c:605
> [...]
>>> 777 encode_run(req, "pa_pk_as_req", "",
>>> acc.encode_krb5_pa_pk_as_req);
>
> I'd be interested in the stack trace going back to near this call site--
> specifically, which encode_krb5_*() function is called.
>
> The reason I ask is that encode_krb5_pa_pk_as_req() should not reach
> split_der(). So I wonder if a different function is being executed
> somehow, like encode_krb5_auth_pack().
>
> If I'm right, then we'll have the mystery of why
> acc_encode_krb5_pa_pk_as_req contains the wrong function pointer. The
> structure is populated by krb5int_accessor().
>
Here is the full stacktrace:
> (gdb) where
> #0 0x60000000c8a788d0:0 in get_tag () at asn1_encode.c:370
> #1 0x60000000c8a79f70:0 in split_der () at asn1_encode.c:605
> #2 0x60000000c8a7b440:0 in encode_cntype () at asn1_encode.c:801
> #3 0x60000000c8a7ab50:0 in encode_atype () at asn1_encode.c:696
> #4 0x60000000c8a7a9a0:0 in encode_atype () at asn1_encode.c:684
> #5 0x60000000c8a7a870:0 in encode_atype () at asn1_encode.c:677
> #6 0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #7 0x60000000c8a7b170:0 in encode_sequence () at asn1_encode.c:838
> #8 0x60000000c8a7a5a0:0 in encode_atype () at asn1_encode.c:662
> #9 0x60000000c8a7a870:0 in encode_atype () at asn1_encode.c:677
> #10 0x60000000c8a7ad00:0 in encode_atype () at asn1_encode.c:713
> #11 0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #12 0x60000000c8a7b170:0 in encode_sequence () at asn1_encode.c:838
> #13 0x60000000c8a7a5a0:0 in encode_atype () at asn1_encode.c:662
> #14 0x60000000c8a7a780:0 in encode_atype () at asn1_encode.c:672
> #15 0x60000000c8a7a9a0:0 in encode_atype () at asn1_encode.c:684
> #16 0x60000000c8a7a870:0 in encode_atype () at asn1_encode.c:677
> #17 0x60000000c8a7ad00:0 in encode_atype () at asn1_encode.c:713
> #18 0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #19 0x60000000c8a7b170:0 in encode_sequence () at asn1_encode.c:838
> #20 0x60000000c8a7a5a0:0 in encode_atype () at asn1_encode.c:662
> #21 0x60000000c8a7a870:0 in encode_atype () at asn1_encode.c:677
> #22 0x60000000c8a7ad00:0 in encode_atype () at asn1_encode.c:713
> ---Type <return> to continue, or q <return> to quit---
> #23 0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #24 0x60000000c8a7b170:0 in encode_sequence () at asn1_encode.c:838
> #25 0x60000000c8a7a5a0:0 in encode_atype () at asn1_encode.c:662
> #26 0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #27 0x60000000c8a7fd10:0 in k5_asn1_full_encode () at asn1_encode.c:1535
> #28 0x60000000c8a87c20:0 in encode_krb5_auth_pack () at asn1_k_encode.c:1513
> #29 0x4011340:0 in main () at krb5_encode_test.c:798
> (gdb)
Your assumption is right.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
