lpass login crashes with malloc error on macOS with OpenSSL 3.6.0

[talionet]

Description

lpass login crashes immediately with a malloc error when attempting to log in on macOS with OpenSSL 3.6.0.

Steps to Reproduce

1. Install lastpass-cli via Homebrew: brew install lastpass-cli
2. Attempt to login: lpass login <email>
3. Process crashes immediately with malloc error

Expected Behavior

The login process should prompt for credentials and complete successfully.

Actual Behavior

The process crashes immediately with the following error:

lpass(12696,0x1f959df00) malloc: * error for object 0x600000000001: pointer being freed was not allocated
lpass(12696,0x1f959df00) malloc:  * set a breakpoint in malloc_error_break to debug
zsh: abort lpass login <email>

System Information

• OS: macOS 24.5.0 (darwin)
• lastpass-cli version: 1.6.1 (also tested with HEAD version - same error)
• OpenSSL version: 3.6.0 (installed via Homebrew)
• Installation method: Homebrew (brew install lastpass-cli)
• Architecture: ARM64 (Apple Silicon)

Additional Context

• The Homebrew formula includes a patch for OpenSSL 3.5 API changes (PR Fix from @ncopa to avoid unbase64 error. #718), but the issue persists with OpenSSL 3.6.0
• The error occurs immediately upon running the login command, before any user interaction
• Both the stable version (1.6.1) and HEAD version exhibit the same behavior
• The formula explicitly depends on openssl@3, which resolves to 3.6.0 on current Homebrew

Related

• The formula patch references: Fix from @ncopa to avoid unbase64 error. #718 (OpenSSL 3.5 workaround)
• This may be related to new API changes in OpenSSL 3.6.0 that aren't covered by the existing patch

[peter-svensson]

I see a similar behaviour, although I get the chance to enter my password when running:

$ lpass login  peter@...
fish: Job 1, 'lpass login  peter@...…' terminated by signal SIGBUS (Misaligned address error)