#1126009 segmentation fault in XSECEnv::setURIResolver

Package:
libxml-security-c30
Source:
libxml-security-c30
Description:
C++ library for XML Digital Signatures (runtime)
Submitter:
jani
Date:
2026-01-27 14:51:04 UTC
Severity:
normal
#1126009#5
Date:
2026-01-20 09:39:01 UTC
From:
To:
I get the following segmentation fault when running  the sample program:
simpleHMAC.cpp from the library itself on trixie. The sample program
works on bookworm

#0  0x00007ffff7f6f22f in XSECEnv::setURIResolver(XSECURIResolver*) ()
from /lib/x86_64-linux-gnu/libxml-security-c.so.30
#1  0x00007ffff7f704fb in XSECProvider::newSignature() () from
/lib/x86_64-linux-gnu/libxml-security-c.so.30
#2  0x0000555555558b34 in main ()

I am using Linux 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1
(2024-06-21) x86_64 GNU/Linux
and libc 2.41-12+deb13u1
#1126009#10
Date:
2026-01-27 11:10:32 UTC
From:
To:
The api changes in 3.0.0 was not implemented into the samples

Adding:
#include <xsec/framework/XSECURIResolverXerces.hpp>

XSECURIResolverXerces resolver;

prov.setDefaultURIResolver(&resolver);

to the code fixes it.
#1126009#15
Date:
2026-01-27 13:30:43 UTC
From:
To:
Likely true, I build the tools but rarely the samples.
#1126009#20
Date:
2026-01-27 14:48:51 UTC
From:
To:
jani via Pkg-shibboleth-devel
<pkg-shibboleth-devel@alioth-lists.debian.net> writes:

Hi,

I'm glad you found a solution!  I'm willing to fix this in the package,
though I don't think that will help you in any way.  (Actually, other
samples may also carry this issue; the packaging already fixes this in
simpleValidate.cpp, the only sample run by our autopkgtests.)

However, please consider that https://santuario.apache.org/ states:

That's why the package description contains the paragraph:

Please set your expectations accordingly.