Bug#526325: samba: Segfaults in rep_strlcpy

2009-05-01 Thread Steve Langasek
On Thu, Apr 30, 2009 at 01:56:05PM +0100, Sam Morris wrote:
 Package: samba
 Version: 2:3.3.3-1
 Severity: normal

 Over the last couple weeks I have received about twenty mails telling me that
 Samba segfaulted. They all have the following backtrace:

 #0  0x7fa78606b4a5 in __libc_waitpid (pid=459, stat_loc=0x7fff914c8b1c,
 options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:32
 #1  0x7fa78600a1e1 in do_system (
 line=0x20ffa10 /usr/share/samba/panic-action 30781)
 at ../sysdeps/posix/system.c:149
 #2  0x00599b00 in smb_panic (why=value optimized out)
 at lib/util.c:1679
 #3  0x00587277 in sig_fault (sig=11) at lib/fault.c:46
 #4  signal handler called
 #5  0x00575d69 in rep_strlcpy (d=0x7fff914c901c , s=0x0, 
 bufsize=256)
 at lib/replace/replace.c:64
 #6  0x005a6e3e in connections_fetch_entry (mem_ctx=0x0,
 conn=value optimized out, name=0x0) at lib/conn_tdb.c:65
 #7  0x00487439 in yield_connection (conn=0x2114970, name=0x0)
 at smbd/connection.c:33
 #8  0x004aba9c in close_cnum (conn=0x2114970, vuid=0)
 at smbd/service.c:1328

Very unusual.  This is happening from the line:

yield_connection(conn, lp_servicename(SNUM(conn)));

which means that a) it's happening on shutdown of a connection, so the fact
that it's not showing up as a service disruption is somewhat expected; and
b) the internal service number for the connection being closed doesn't
have an associated name.

Could you set debug level = 3 in your smb.conf, restart, find the
corresponding backtrace in the samba log, and send us as complete as
possible a copy of that log, covering the period from the connection to the
crash?

Please also forward a copy of your smb.conf.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
Ubuntu Developerhttp://www.debian.org/
slanga...@ubuntu.com vor...@debian.org



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#526325: samba: Segfaults in rep_strlcpy

2009-04-30 Thread Sam Morris
Package: samba
Version: 2:3.3.3-1
Severity: normal

Over the last couple weeks I have received about twenty mails telling me that
Samba segfaulted. They all have the following backtrace:

#0  0x7fa78606b4a5 in __libc_waitpid (pid=459, stat_loc=0x7fff914c8b1c,
options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:32
#1  0x7fa78600a1e1 in do_system (
line=0x20ffa10 /usr/share/samba/panic-action 30781)
at ../sysdeps/posix/system.c:149
#2  0x00599b00 in smb_panic (why=value optimized out)
at lib/util.c:1679
#3  0x00587277 in sig_fault (sig=11) at lib/fault.c:46
#4  signal handler called
#5  0x00575d69 in rep_strlcpy (d=0x7fff914c901c , s=0x0, bufsize=256)
at lib/replace/replace.c:64
#6  0x005a6e3e in connections_fetch_entry (mem_ctx=0x0,
conn=value optimized out, name=0x0) at lib/conn_tdb.c:65
#7  0x00487439 in yield_connection (conn=0x2114970, name=0x0)
at smbd/connection.c:33
#8  0x004aba9c in close_cnum (conn=0x2114970, vuid=0)
at smbd/service.c:1328
#9  0x0078a7c5 in reply_tdis (req=0x210f6c0) at smbd/reply.c:4605
#10 0x004a9447 in switch_message (type=113 'q', req=0x210f6c0,
size=value optimized out) at smbd/process.c:1486
#11 0x004ab7e5 in smbd_process () at smbd/process.c:1509
#12 0x004790a1 in main (argc=value optimized out, argv=0x2)
at smbd/server.c:1523

I can't think of anything I'm doing to trigger this, it just seems to happen
occasionally. I haven't noticed any interruption in service to clients.

The server itself is just my laptop, sharing a few files to other client
machines. Nothing heavy.

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (530, 'testing'), (520, 'unstable'), (400, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.29-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages samba depends on:
ii  adduser  3.110   add and remove users and groups
ii  debconf [debconf-2.0 1.5.26  Debian configuration management sy
ii  libacl1  2.2.47-2Access control list shared library
ii  libattr1 1:2.4.43-2  Extended attribute shared library
ii  libc62.9-4   GNU C Library: Shared libraries
ii  libcap2  1:2.16-5support for getting/setting POSIX.
ii  libcomerr2   1.41.3-1common error description library
ii  libcups2 1.3.8-1lenny4.1 Common UNIX Printing System(tm) - 
ii  libgnutls26  2.6.4-2 the GNU TLS library - runtime libr
ii  libgssapi-krb5-2 1.6.dfsg.4~beta1-13 MIT Kerberos runtime libraries - k
ii  libk5crypto3 1.6.dfsg.4~beta1-13 MIT Kerberos runtime libraries - C
ii  libkrb5-31.6.dfsg.4~beta1-13 MIT Kerberos runtime libraries
ii  libldap-2.4-22.4.11-1OpenLDAP libraries
ii  libpam-modules   1.0.1-9 Pluggable Authentication Modules f
ii  libpam-runtime   1.0.1-9 Runtime support for the PAM librar
ii  libpam0g 1.0.1-9 Pluggable Authentication Modules l
ii  libpopt0 1.14-4  lib for parsing cmdline parameters
ii  libtalloc1   1.2.1-1 hierarchical pool based memory all
ii  libwbclient0 2:3.3.3-1   Samba winbind client library
ii  logrotate3.7.7-3 Log rotation utility
ii  lsb-base 3.2-22  Linux Standard Base 3.2 init scrip
ii  procps   1:3.2.7-11  /proc file system utilities
ii  samba-common 2:3.3.3-1   common files used by both the Samb
ii  update-inetd 4.31inetd configuration file updater
ii  zlib1g   1:1.2.3.3.dfsg-13   compression library - runtime

samba recommends no packages.

Versions of packages samba suggests:
pn  ctdbnone   (no description available)
pn  ldb-tools   none   (no description available)
ii  openbsd-inetd [inet-superse 0.20080125-2 The OpenBSD Internet Superserver
pn  smbldap-tools   none   (no description available)

-- debconf information:
  samba/run_mode: daemons
  samba/generate_smbpasswd: true



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org