javascript crypto.signText makes Iceweasel crash

03-30-2011, 07:40 AM

Hello!

I'm trying to use the _javascript_ function crypto.signText().

My code is :

<html>

<head>

<script>

var foo = crypto.signText("Test signature", "ask");

</script>

</head>

<body>

This is an HTML page<p>

<script>

document.write(foo);

</script>

</body>

</html>

I have imported successfully several certificates and my CA certificate in Iceweasel.

When I choose a user in the dialog box with the list of certificates
and enter the right password, Iceweasel just crashes without an error
message.

I tried to uninstall and reinstall Iceweasel, to delete and readd my
certificates, to use others certificates, but nothing worked.

I have Iceweasel version 3.5.16.

I tried to launch Iceweasel in the debug mode and printed backtrace of all stack frames :

#0Â* 0xb7fe2424 in __kernel_vsyscall ()

#1Â* 0xb7d82751 in raise () from /lib/i686/cmov/libc.so.6

#2Â* 0xb7d85b82 in abort () from /lib/i686/cmov/libc.so.6

#3Â* 0xb24a2e7a in SECITEM_CopyItem_stub (arena=0x0, to=0xabd2a5c8, from=0xabd42028) at stubs.c:474

#4Â* 0xb249008b in init_blinding_params (key=<value optimized
out>, output=<value optimized out>, input=0xabd24900 "",
check=1) at rsa.c:582

#5Â* get_blinding_params (key=<value optimized out>,
output=<value optimized out>, input=0xabd24900 "", check=1) at
rsa.c:653

#6Â* rsa_PrivateKeyOp (key=<value optimized out>, output=<value
optimized out>, input=0xabd24900 "", check=1) at rsa.c:726

#7Â* 0xb24f8fd0 in RSA_PrivateKeyOpDoubleChecked (key=0xabd42018,

Â*Â*Â* output=0xabd24880 "327
R32524314323f22360301306E21537662242122736033 7|0gp301v33Õ‰25231003!346l23566t+271265307fsy27 0237xaÈ”~,322#s237275203}2013753203427170k260q2 3635261263232370.>353u361366cÉ®[>4211^264n5262274306e^230;FN300/j311P360316)311GK257306Æ²256311-",
<incomplete sequence 336>, input=0xabd24900 "") at loader.c:244

#8Â* 0xb24ed7a8 in RSA_Sign (key=0xabd42010,

Â*Â*Â* output=0xabd24880 "327
R32524314323f22360301306E21537662242122736033 7|0gp301v33Õ‰25231003!346l23566t+271265307fsy27 0237xaÈ”~,322#s237275203}2013753203427170k260q2 3635261263232370>353u361366cÉ®[>4211^264n5262274306e^230;FN300/j311P360316)311GK257306Æ²256311-",
<incomplete sequence 336>, output_len=0xbfff8268,
maxOutputLen=128, input=0xabd23010
"0!0 0605+1603023205",

Â*Â*Â* input_len=35) at rsawrapr.c:483

#9Â* 0xb24e2fae in NSC_Sign (hSession=16777219, pData=0xabd23010 "0!0 0605+1603023205", ulDataLen=35,

Â*Â*Â* pSignature=0xabd24880 "327
R32524314323f22360301306E21537662242122736033 7|0gp301v33Õ‰25231003!346l23566t+271265307fsy27 0237xaÈ”~,322#s237275203}2013753203427170k260q2 3635261263232370>353u361366cÉ®[>4211^264n5262274306e^230;FN300/j311P360316)311GK257306Æ²256311-",
<incomplete sequence 336>, pulSignatureLen=0xbfff82dc) at
pkcs11c.c:2292

#10 0xb6c2dabe in PK11_Sign (key=0xabd2d010, sig=0xbfff8368, hash=0xbfff8374) at pk11obj.c:768

#11 0xb6c1616a in SGN_End (cx=0xabd13100, result=0xbfff8448) at secsign.c:246

#12 0xb6c163a8 in SEC_SignData (res=0xbfff8448,

Â*Â*Â* buf=0xabd09ac0
"1]03006 *206H206367
01 0361v06 *206H206367
01a01603406 *206H206367
01 05611727
110329121510Z0#06 *206H206367
01 0461260424v356273IF
376276241%227N1314f203d275P",
<incomplete sequence 335>, len=95,

Â*Â*Â* pk=0xabd2d010, algid=SEC_OID_PKCS1_SHA1_WITH_RSA_ENCRYPTION) at secsign.c:300

#13 0xb6ce36ad in sec_pkcs7_encoder_sig_and_certs (cinfo=<value
optimized out>, pwfn=<value optimized out>,
pwfnarg=0xad003c50) at p7encode.c:1009

#14 0xb6ce394c in SEC_PKCS7PrepareForEncode (cinfo=0xabd70810, bulkkey=0x0, pwfn=0, pwfnarg=0xad003c50) at p7encode.c:1198

#15 0xb6ce39d7 in SEC_PKCS7Encode (cinfo=0xabd70810,
outputfn=0xb76a5942, outputarg=0xbfff88c4, bulkkey=0x0, pwfn=0,
pwfnarg=0xad003c50) at p7encode.c:1239

#16 0xb76a57a8 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#17 0xb78511e7 in NS_InvokeByIndex_P () from /usr/lib/xulrunner-1.9.1/libxul.so

#18 0xb705f4c6 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#19 0xb70665a4 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#20 0xb6d5b6b7 in js_Invoke () from /usr/lib/libmozjs.so.2d

#21 0xb6d4ba5b in ?? () from /usr/lib/libmozjs.so.2d

#22 0xb6d5afad in ?? () from /usr/lib/libmozjs.so.2d

#23 0xb6d21577 in JS_EvaluateUCScriptForPrincipals () from /usr/lib/libmozjs.so.2d

#24 0xb74340c1 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#25 0xb73275cf in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#26 0xb732770a in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#27 0xb73286a1 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#28 0xb732648e in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#29 0xb73937e1 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#30 0xb7392854 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#31 0xb73aeb22 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#32 0xb73af5bf in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#33 0xb73af7c7 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#34 0xb714fb3a in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#35 0xb71517b9 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#36 0xb7152c39 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

#37 0xb7151199 in ?? () from /usr/lib/xulrunner-1.9.1/libxul.so

Anyone can help me?

Marion

--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/ea-mime-4d92de7f-376d-2f2cc8b0@webmail.numericable.fr

03-30-2011, 09:40 AM

On Wed, 30 Mar 2011 09:40:47 +0200, Marion VOGT wrote:

(ugh, please, avoid using html formatted messages)

> I have imported successfully several certificates and my CA certificate
> in Iceweasel.
>
> When I choose a user in the dialog box with the list
> of certificates and enter the right password, Iceweasel just crashes
> without an error message.
>
> I tried to uninstall and reinstall Iceweasel, to delete and readd my
> certificates, to use others certificates, but nothing worked.
>
> I have Iceweasel version 3.5.16.

You can try the same with the upstream version (Firefox) and check if the
same error happens there. If the error is also reproducible, you can open
a bug report in Mozilla attaching the full backtrace. If Firefox does not
crash, report the bug in Debian BTS, also attaching the logs.

Greetings,

--
Camaleón

--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: pan.2011.03.30.09.40.41@gmail.com">http://lists.debian.org/pan.2011.03.30.09.40.41@gmail.com

03-30-2011, 11:33 AM

El 2011-03-30 a las 13:12 +0200, Marion VOGT escribió:

(resending to the list)

(please, try to remember sending no html in messages, it's very hard to
read that gibberish with Mutt and other text-based clients ;-) )

>> You can try the same with the upstream version (Firefox) and check if the
>> same error happens there. If the error is also reproducible, you can open
>> a bug report in Mozilla attaching the full backtrace. If Firefox does not
>> crash, report the bug in Debian BTS, also attaching the logs.

> It works with Firefox.
> Thank you!

Good, but better if you report this to Debian BTS (bug tracking system).
That way you'll help developers to be aware of this issue and they may
release release a fix.

Greetings,

--
Camaleón

--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20110330113307.GB5237@stt008.linux.site">http://lists.debian.org/20110330113307.GB5237@stt008.linux.site

03-30-2011, 12:58 PM

On Wed, Mar 30, 2011 at 01:33:07PM +0200, Camaleón wrote:
> El 2011-03-30 a las 13:12 +0200, Marion VOGT escribió:
>
> (resending to the list)
>
> (please, try to remember sending no html in messages, it's very hard to
> read that gibberish with Mutt and other text-based clients ;-) )

You can get mutt to render html (and other formats in a similar manner)
to text by adding:
auto_view text/html
to your ~/.muttrc, adding:
text/html; /usr/bin/elinks -force-html -dump '%s'; copiousoutput; description=HTML Text; nametemplate=%s.html
to your /etc/mailcap.

03-30-2011, 01:20 PM

On Wed, 30 Mar 2011 13:58:49 +0100, Darac Marjal wrote:

> On Wed, Mar 30, 2011 at 01:33:07PM +0200, Camaleón wrote:
>> El 2011-03-30 a las 13:12 +0200, Marion VOGT escribió:
>>
>> (resending to the list)
>>
>> (please, try to remember sending no html in messages, it's very hard to
>> read that gibberish with Mutt and other text-based clients ;-) )
>
> You can get mutt to render html (and other formats in a similar manner)
> to text by adding:
> auto_view text/html
> to your ~/.muttrc, adding:
> text/html; /usr/bin/elinks -force-html -dump '%s'; copiousoutput;
> description=HTML Text; nametemplate=%s.html
> to your /etc/mailcap.

Thanks for the tip (I already knew it) but should I wanted to render html
formatted messages I would have opened Gmail's webmail, Icedove or
Evolution... ;-)

It's not that I can or can't read html messages but respecting the most
basic mailing list netiquette and more specifically _this_ mailing list
code of conduct, i.e., using text formatted e-mails.

Greetings,

--
Camaleón

--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: pan.2011.03.30.13.20.57@gmail.com">http://lists.debian.org/pan.2011.03.30.13.20.57@gmail.com

03-30-2011, 05:26 PM

On 2011-03-30 14:58, Darac Marjal wrote:

On Wed, Mar 30, 2011 at 01:33:07PM +0200, Camaleón wrote:

El 2011-03-30 a las 13:12 +0200, Marion VOGT escribió:

You can get mutt to render html (and other formats in a similar manner)
to text by adding: . . . .

But normal people do not want to render html!

--
li.vog@schwaz.net aktzeptiert nur Mails, die im "TO:"-header eine von
mir abonnierte Liste enthalten. -- li.vog@schwaz.net accepts only
postings whith a list subscribed by me in their "TO:"-header. --
li.vog@schwaz.net accetta solo messaggi con una lista sottoscritta di me
in "TO:"-header.

--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Archive: 4D9367D0.7020700@schwaz.net">http://lists.debian.org/4D9367D0.7020700@schwaz.net