Bug 6510 – globus-gssapi-gsi library not thread safe

Bug 6510 - globus-gssapi-gsi library not thread safe

Summary:

globus-gssapi-gsi library not thread safe

Status:	RESOLVED FIXED

Product:	GSI C
Component:	Authorization
Version:	4.2.1
Platform:	NorduGrid Linux

Importance:	P3 critical
Target Milestone:	4.2.2
Assigned To:	Joe Bester

URL:	http://bugzilla.nordugrid.org/cgi-bin...
Keywords:	robustness

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2008-10-28 10:02 by Mattias Ellert
Modified:	2008-10-29 05:27 (History)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note

You need to log in before you can comment on or make changes to this bug.

Description From Mattias Ellert 2008-10-28 10:02:38

The globus_i_gsi_gssapi_init_ssl_context function calls SSL_library_init.
However, the SSL_library_init function is not thread safe and this call causes
segmentation faults when the globus-gssapi-gsi library is used in a threaded
environment.

With this patch (which removes the call to SSL_library_init) the segfaults go
away:

http://www.grid.tsl.uu.se/repos/globus/fedora/9/info/globus-gssapi-gsi-sslinit.patch

The SSL_library_init must of course be called from somewhere else, but in a
thread safe way. One way to do it is given in comment #22 of bug #4743:

http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=4743#c22

This adds the call to the initialization of the globus openssl module, also
implemented in this patch:

http://www.grid.tsl.uu.se/repos/globus/fedora/9/info/globus-openssl-module-sslinit.patch

------- Comment #1 From Joe Bester 2008-10-29 05:22:07 -------

Patches commited to 4.2 branch and trunk