Bug 151154 - audio/amarok-kde4 crashes on network activity if ports openssl is installed
Summary: audio/amarok-kde4 crashes on network activity if ports openssl is installed
Status: Closed Feedback Timeout
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-kde (group)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-10-02 14:40 UTC by Pascal Stumpf
Modified: 2014-07-21 21:21 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Pascal Stumpf 2010-10-02 14:40:02 UTC 
security/tor requires to have OpenSSL installed from ports due to renegotiation being disabled in base OpenSSL in some supported FreeBSD releases (not sure which ones, but I think 8.1 has it re-enabled). Unfortunately, this can lead to ugly and unexpected bugs in ports that link against OpenSSL libraries. As it was exposed by Amarok (https://bugs.kde.org/show_bug.cgi?id=252912), KIO libraries may run into problems when calling functions from different versions of these libraries, crashing the application. Note that this is not confined to Amarok, but may affect any other application relying on KIO and QtSsl.

Fix: 

The best solution to this would be to re-enable renegotiation in OpenSSL in all supported releases. Disabling it in the first place was more a workaround than a real security fix anyway. Then one could safely remove the dependency of security/tor on ports OpenSSL.
How-To-Repeat: Install security/openssl and audio/amarok-kde4, start amarok, enable lyrics plugin, cover fetching etc., play a file and watch it crash.
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2010-10-02 14:40:06 UTC 
Maintainer of audio/amarok-kde4,

Please note that PR ports/151154 has just been submitted.

If it contains a patch for an upgrade, an enhancement or a bug fix
you agree on, reply to this email stating that you approve the patch
and a committer will take care of it.

The full text of the PR can be found at:
    http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/151154

-- 
Edwin Groothuis via the GNATS Auto Assign Tool
edwin@FreeBSD.org
Comment 2 Edwin Groothuis freebsd_committer freebsd_triage 2010-10-02 14:40:08 UTC 
State Changed
From-To: open->feedback

Awaiting maintainers feedback (via the GNATS Auto Assign Tool)
Comment 3 Mark Linimon freebsd_committer freebsd_triage 2011-02-13 01:51:36 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->kde

Over to new maintainer.
Comment 4 Eitan Adler freebsd_committer freebsd_triage 2011-09-24 19:10:55 UTC 
State Changed
From-To: feedback->open

feedback timeout
Comment 5 Alberto Villa freebsd_committer freebsd_triage 2012-08-16 23:51:03 UTC 
State Changed
From-To: open->analyzed

The issue was analysed by avg@ - 
http://mail.kde.org/pipermail/kde-freebsd/2012-February/012478.html - 
and a solution will be evaluated - 
http://mail.kde.org/pipermail/kde-freebsd/2012-August/013842.html
Comment 6 Alberto Villa freebsd_committer freebsd_triage 2012-08-20 16:00:25 UTC 
State Changed
From-To: analyzed->feedback

The problem should have been fixed in r292033, can you test again?
Comment 7 Raphael Kubo da Costa freebsd_committer freebsd_triage 2014-07-21 21:21:19 UTC 
Timeout.