#593680 gnupg: segfaults on --list-secret-keys with "list-options show-photos"

Package:
gnupg
Source:
gnupg2
Submitter:
Y Giridhar Appaji Nag
Date:
2010-08-24 12:21:05 UTC
Severity:
normal
#593680#3
Date:
2010-08-20 08:40:27 UTC
From:
To:
I use a "list-options show-photos" in my gpg.conf and also have a photo as a
UID in my secret keys.  I use "display" from the imagemagick package to view
photo UIDs in GPG.  The problem is that

"gpg --list-secret-keys" segfaults.

"gpg --list-secret-keys --no-show-photos" works OK

"gpg --list-secret-keys --verify-options no-show-photos" segfaults.

Attaching the transcript of a session where this happens.

Giridhar

- -- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (900, 'testing'), (800, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-trunk-686 (SMP w/2 CPU cores)
Locale: LANG=en_IN, LC_CTYPE=en_IN (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gnupg depends on:
ii  dpkg                    1.15.7.2         Debian package management system
ii  gpgv                    1.4.10-4         GNU privacy guard - signature veri
ii  install-info            4.13a.dfsg.1-5   Manage installed documentation in
ii  libbz2-1.0              1.0.5-4          high-quality block-sorting file co
ii  libc6                   2.11.2-2         Embedded GNU C Library: Shared lib
ii  libreadline6            6.1-3            GNU readline and history libraries
ii  libusb-0.1-4            2:0.1.12-15      userspace USB programming library
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages gnupg recommends:
ii  gnupg-curl                    1.4.10-4   GNU privacy guard - a free PGP rep
ii  libldap-2.4-2                 2.4.17-2.1 OpenLDAP libraries

Versions of packages gnupg suggests:
pn  gnupg-doc                    <none>      (no description available)
ii  imagemagick                  7:6.6.0.4-2 image manipulation programs
ii  libpcsclite1                 1.5.5-3     Middleware to access a smart card

- -- no debconf information
iQEcBAEBCAAGBQJMbj93AAoJENbfLHnbvsrcT14IAIF1LsPITTmywMjs/YD42iCX
44YWFoarokUCPVQbxip9m9gtX0SWtExIwvdUUSgzOwUQMB71etIra0AOzB9s6utP
8a5WcMHc95do6Q+ZMCiAAGyF2VRNgND/P3vTZM4cfxckep9k4U5nnB53wm8+3pBd
tn1+5dNoVV8HQWxFiuId4m/tA/KKIwbqBmchGZC8dUsENEUfROS+WZorV6iXEkwi
ceJpeL92+IZSU8VNInDsTMqvl75cm+dFYKy03rqG1NMHT97PfjF9F2yyf84gOHap
osOhEKUbK3+YwVuQGImX4+tssw8nPR8iWr9P9fAT9nXY5eH648XHU0XGagdZRh8=
=0HTd
-----END PGP SIGNATURE-----
#593680#8
Date:
2010-08-20 16:51:25 UTC
From:
To:
Am Freitag, den 20.08.2010, 14:10 +0530 schrieb Y Giridhar Appaji Nag:
your key or one of the keys in your keyring. Can you attach the photo
you are using? Or if you have the time (and the necessary knowledge):
please rebuild the gnupg packages not stripping the symbols, reproduce
the crash and send us the backtrace.

JFTR: Does viewing your photo with display directly produce a crash?

Regards, Daniel
#593680#13
Date:
2010-08-20 16:51:25 UTC
From:
To:
Am Freitag, den 20.08.2010, 14:10 +0530 schrieb Y Giridhar Appaji Nag:
your key or one of the keys in your keyring. Can you attach the photo
you are using? Or if you have the time (and the necessary knowledge):
please rebuild the gnupg packages not stripping the symbols, reproduce
the crash and send us the backtrace.

JFTR: Does viewing your photo with display directly produce a crash?

Regards, Daniel
#593680#18
Date:
2010-08-21 13:28:22 UTC
From:
To:
Everything Daniel said above, plus, does listing the public keyring (i.e. "list-keys" instead of "list-secret-keys") also cause the segfault?

(and if so, can you send me the public keyring?  I wouldn't ask for a secret keyring unless you're not interested in those keys for whatever reason, but a public one is generally public)

David
#593680#23
Date:
2010-08-21 13:28:22 UTC
From:
To:
Everything Daniel said above, plus, does listing the public keyring (i.e. "list-keys" instead of "list-secret-keys") also cause the segfault?

(and if so, can you send me the public keyring?  I wouldn't ask for a secret keyring unless you're not interested in those keys for whatever reason, but a public one is generally public)

David
#593680#26
Date:
2010-08-21 13:28:22 UTC
From:
To:
Everything Daniel said above, plus, does listing the public keyring (i.e. "list-keys" instead of "list-secret-keys") also cause the segfault?

(and if so, can you send me the public keyring?  I wouldn't ask for a secret keyring unless you're not interested in those keys for whatever reason, but a public one is generally public)

David
#593680#29
Date:
2010-08-24 12:09:04 UTC
From:
To:
On 10/08/24 17:37 +0530, Y Giridhar Appaji Nag said ...

No, it doesn't.

Giridhar
#593680#32
Date:
2010-08-24 12:07:21 UTC
From:
To:
On 10/08/21 09:28 -0400, David Shaw said ...

Attaching the picture with this mail.

I'll try and do this, but not immediately.

No.  This doesn't happen with the public keyring.

I am afraid I can't give you the secret keyring and the problem doesn't happen
with the public keyring.

Cheers,

Giridhar