FS#62160 - [nss] File Descriptor Leak

Attached to Project: Arch Linux
Opened by Carlo Abelli (carloabelli) - Wednesday, 27 March 2019, 22:16 GMT
Last edited by Jan Alexander Steffens (heftig) - Friday, 17 January 2020, 11:08 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Jan de Groot (JGC)
Jan Alexander Steffens (heftig)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
There is a file descriptor leak when unable to read a certificate in /etc/ca-certificates/trust-source/anchors.

The file descriptor for the /etc/ca-certificates/trust-source/anchors directory is left open.

This can eventually cause applications to run out of file descriptors e.g. https://bugzilla.mozilla.org/show_bug.cgi?id=1539188.

Steps to reproduce:
1. create a unreadable certificate in /etc/ca-certificates/trust-source/anchors
This task depends upon

Closed by  Jan Alexander Steffens (heftig)
Friday, 17 January 2020, 11:08 GMT
Reason for closing:  Fixed
Additional comments about closing:  p11-kit 0.23.16.1-1
Comment by loqs (loqs) - Thursday, 04 April 2019, 22:32 GMT
If you rebuild p11-kit with https://github.com/p11-glue/p11-kit/commit/e2170b295992cb7fdf115227a78028ac3780619f is the issue still present?
If it is have you filed an upstream bug report against p11-kit?

Loading...