[Libreoffice-bugs] [Bug 121429] New: Missing NSS libs in the chroot cause loolforkit to segfault on PDF export

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=121429

            Bug ID: 121429
           Summary: Missing NSS libs in the chroot cause loolforkit to
                    segfault on PDF export
           Product: LibreOffice Online
           Version: unspecified
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: guilhem at fripost.org

On Debian systems, extra libraries have to be copied to the systemplate chroot,
namely /usr/lib/$TRIPLET/nss/*.so and /usr/lib/$TRIPLET/libsqlite3.so.* (where
$TRIPLET is the architecture triplet, typically "x86_64-linux-gnu").

These libraries don't show up in `ldd /path/to/xpdfimport`, but omitting them
in the chroot (partially) breaks NSS.  In particular, exporting a document to
PDF, either directly in LOOL or using its API with `curl -F
data=@/path/to/doc.odt http://127.0.0.1:9980/lool/convert-to/pdf`, causes
loolforkit to segfault.  AFAICT from a debug trace, this is because the PDF
writer calls ::comphelper::Hash which in turns triggers a null pointer
dereference in libnss's HASH_Begin.

Making loolwsd-systemplate-setup copy these libraries to the chroot fixed the
PDF export issue on our instance.  The problem might be Debian-specific as
RedHat-based distros don't have that "nss" sub-directory (instead libfreebl3.so
and friends are copied directly in /lib; not sure if on these systems the
chroot has a crippled libnss or not).

System info: LOOLWSD 6.1.3, LOKit 6.1.3.2

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20181115/843b7dcc/attachment.html>