Failing ASN.1 tests with PKINIT on HP-UX

[Osipov, Michael (IN IT IN)]

On 2025-09-28 07:21, Greg Hudson wrote:
> On 9/27/25 06:17, Osipov, Michael (IN IT IN) via Kerberos wrote:
>>> (gdb) where
>>> #0  0x60000000c8a788d0:0 in get_tag () at asn1_encode.c:370
>>> #1  0x60000000c8a79f70:0 in split_der () at asn1_encode.c:605
> [...]
>>> 777         encode_run(req, "pa_pk_as_req", "", 
>>> acc.encode_krb5_pa_pk_as_req);
> 
> I'd be interested in the stack trace going back to near this call site-- 
> specifically, which encode_krb5_*() function is called.
> 
> The reason I ask is that encode_krb5_pa_pk_as_req() should not reach 
> split_der().  So I wonder if a different function is being executed 
> somehow, like encode_krb5_auth_pack().
> 
> If I'm right, then we'll have the mystery of why 
> acc_encode_krb5_pa_pk_as_req contains the wrong function pointer.  The 
> structure is populated by krb5int_accessor().
> 

Here is the full stacktrace:
> (gdb) where
> #0  0x60000000c8a788d0:0 in get_tag () at asn1_encode.c:370
> #1  0x60000000c8a79f70:0 in split_der () at asn1_encode.c:605
> #2  0x60000000c8a7b440:0 in encode_cntype () at asn1_encode.c:801
> #3  0x60000000c8a7ab50:0 in encode_atype () at asn1_encode.c:696
> #4  0x60000000c8a7a9a0:0 in encode_atype () at asn1_encode.c:684
> #5  0x60000000c8a7a870:0 in encode_atype () at asn1_encode.c:677
> #6  0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #7  0x60000000c8a7b170:0 in encode_sequence () at asn1_encode.c:838
> #8  0x60000000c8a7a5a0:0 in encode_atype () at asn1_encode.c:662
> #9  0x60000000c8a7a870:0 in encode_atype () at asn1_encode.c:677
> #10 0x60000000c8a7ad00:0 in encode_atype () at asn1_encode.c:713
> #11 0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #12 0x60000000c8a7b170:0 in encode_sequence () at asn1_encode.c:838
> #13 0x60000000c8a7a5a0:0 in encode_atype () at asn1_encode.c:662
> #14 0x60000000c8a7a780:0 in encode_atype () at asn1_encode.c:672
> #15 0x60000000c8a7a9a0:0 in encode_atype () at asn1_encode.c:684
> #16 0x60000000c8a7a870:0 in encode_atype () at asn1_encode.c:677
> #17 0x60000000c8a7ad00:0 in encode_atype () at asn1_encode.c:713
> #18 0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #19 0x60000000c8a7b170:0 in encode_sequence () at asn1_encode.c:838
> #20 0x60000000c8a7a5a0:0 in encode_atype () at asn1_encode.c:662
> #21 0x60000000c8a7a870:0 in encode_atype () at asn1_encode.c:677
> #22 0x60000000c8a7ad00:0 in encode_atype () at asn1_encode.c:713
> ---Type <return> to continue, or q <return> to quit---
> #23 0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #24 0x60000000c8a7b170:0 in encode_sequence () at asn1_encode.c:838
> #25 0x60000000c8a7a5a0:0 in encode_atype () at asn1_encode.c:662
> #26 0x60000000c8a7b880:0 in encode_atype_and_tag () at asn1_encode.c:768
> #27 0x60000000c8a7fd10:0 in k5_asn1_full_encode () at asn1_encode.c:1535
> #28 0x60000000c8a87c20:0 in encode_krb5_auth_pack () at asn1_k_encode.c:1513
> #29 0x4011340:0 in main () at krb5_encode_test.c:798
> (gdb)

Your assumption is right.