Bug 38615

Summary: Spicec (win32) & SSL => Runtimeerror + potential fix for it
Product: Spice Reporter: Thomas Tyminski <thomast>
Component: spicec (deprecated)Assignee: Spice Bug List <spice-bugs>
Status: RESOLVED WONTFIX QA Contact:
Severity: major    
Priority: medium Keywords: security
Version: unspecified   
Hardware: All   
OS: Linux (All)   
Whiteboard:
i915 platform: i915 features:

Description Thomas Tyminski 2011-06-23 13:00:15 UTC
Hi,

Normally I connect under Linux(debian/ubuntu) to my SpiceVM with:
spicec -h 192.168.0.5 -s 5924 --host-subject C=DE,L=Berlin,O=MyTestingBench,CN=spiceserver

I compiled the current master Branch with VC++ 2008.
The debug spicec.exe gives me an Assertion Error:
"vector subscript out of range".

The Runtime Error is triggered inside the Method "connect_secure" of the class "RedPeer"(red_peer.cpp).

Concretely Line 184 fw :
################################################
verify = spice_openssl_verify_new(
    _ssl, auth_flags,
    host,
    (char*)&options.host_auth.host_pubkey[0],
    options.host_auth.host_pubkey.size(),
    options.host_auth.host_subject.c_str());
################################################

My fix:
################################################
verify = spice_openssl_verify_new(
    _ssl, auth_flags,
    host,
    (char*)&options.host_auth.host_pubkey,
    options.host_auth.host_pubkey.size(),
    options.host_auth.host_subject.c_str());
################################################

host_pubkey seems to be empty atm of accessing it, therefore it crashes.
Or the VC-Compiler compiles the client different to gcc/g++.

Greetings
Thomas Tyminski
Berlin, Germany
Comment 1 Christophe Fergeau 2014-02-13 15:41:41 UTC
I'd recommend using remote-viewer which can be found at http://virt-manager.org/download/ (including Windows builds).
Comment 2 Victor Toso 2015-06-19 17:49:47 UTC
spicec is deprecated.

If you hit this bug, we highly recommended virt-viewer

http://virt-manager.org/download/
http://www.spice-space.org/download.html

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.