[#60404] is RB_GC_GUARD needed in rb_io_syswrite? — Eric Wong <normalperson@...>
I haven't gotten it to crash as-is, but it seems like we need to
4 messages
2014/02/01
[#60682] volatile usages — Eric Wong <normalperson@...>
Hi all, I went ahead and removed some use of volatile which were once
5 messages
2014/02/13
[#60794] [RFC] rearrange+pack vtm and time_object structs — Eric Wong <normalperson@...>
Extracted from addendum on top of Feature #9362 (cache-aligned objects).
4 messages
2014/02/16
[#61139] [ruby-trunk - Feature #9577] [Open] [PATCH] benchmark/driver.rb: align columns in text output — normalperson@...
Issue #9577 has been reported by Eric Wong.
3 messages
2014/02/28
[ruby-core:60588] [ruby-trunk - Bug #9504] [Open] X509 certificate incorrectly loaded (because of try-pem-first-else-asn1)
From:
ms@...
Date:
2014-02-08 20:43:25 UTC
List:
ruby-core #60588
Issue #9504 has been reported by Mark Schloesser. ---------------------------------------- Bug #9504: X509 certificate incorrectly loaded (because of try-pem-first-else-asn1) https://bugs.ruby-lang.org/issues/9504 * Author: Mark Schloesser * Status: Open * Priority: Normal * Assignee: * Category: ext/openssl * Target version: next minor * ruby -v: ruby 1.9.3p484 (2013-11-22 revision 43786) [x86_64-linux] * Backport: 1.9.3: UNKNOWN, 2.0.0: UNKNOWN, 2.1: UNKNOWN ---------------------------------------- Ruby's openssl extension tries to load certificates as PEM format first, and on failure will try to do DER / ASN1. The PEM format loading ignores junk in the beginning and end of the given buffer, which can lead to a DER certificate being incorrectly loaded. This occurs on 1.9.3 and 2.2.0. More concretely this occurs in the wild when a server certificate has a X509 extension comment that includes another certificate in PEM format. Example below. To fix this, one could allow the user to optionally specify the format, and do DER directly if specified. That would keep things backwards compatible and allow these certificates to be correctly parsed. Example certificate - http://pastebin.com/V90dDSez Openssl output for this - http://pastebin.com/GSsLtP8J Ruby script to show the bug/problem - http://pastebin.com/Q7ap7FjN I currently patched my ruby version (1.9.3) like this: http://pastebin.com/HzyyAm0p Thanks for feedback and incorporating the patch / a similar solution for this into Ruby. -- http://bugs.ruby-lang.org/