Public bug reported:

When running swat on a 32bit 12.04 install, swat segfaults when the user
clicks on the "Full View" button in the configuration menu. This only
happens on the 32bit install, the 64bit install seems fine.

This was reported to upstream under
https://bugzilla.samba.org/show_bug.cgi?id=8999 but can only be
reproduced with the distro packages.

swat crashes with the following backtrace (sorry for the missing debug
symbols, the samba-dbg package doesn't seem to help gdb getting debug
symbols for swat):

(gdb) bt
#0  0xb72340c0 in ?? ()
#1  0xb7d7923c in _talloc_free () from /usr/lib/i386-linux-gnu/libtalloc.so.2
#2  0x80215875 in smb_iconv_close ()
#3  0x80204d65 in ?? ()
#4  0x802051d8 in smb_iconv_convenience_reinit ()
#5  0x801f2bf5 in init_iconv ()
#6  0x801f2c32 in lazy_initialize_conv ()
#7  0x801f35e5 in convert_string_talloc ()
#8  0x80074c99 in cgi_load_variables ()
#9  0x80071e3c in main ()

A relatively straightforward way to reproduce the crash in gdb is running gdb 
swat, and then typing in
GET /viewconfig HTTP/1.1
Authorization: Basic <base64 of user:pass>

then grab the xsrf and xsrf_time values in the form displayed...

GET /viewconfig?full_view=Full+View&xsrf=<xsrf>&xsrf_time=<xsrf_time> HTTP/1.1
Authorization: Basic <base64 of user:pass>

and the segfault happens.
With the current v3-6-test git HEAD from the samba git, this doesn't happen. 
The last time this code was touched upstream was in 2009, so I'm not sure a 
code change caused this.

You cannot reproduce the crash if you start swat with -a to skip the
authentication logic, so you need to set up a root password for this to
work.

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: swat 2:3.6.3-2ubuntu2.3
ProcVersionSignature: Ubuntu 3.2.0-25.40-generic-pae 3.2.18
Uname: Linux 3.2.0-25-generic-pae i686
ApportVersion: 2.0.1-0ubuntu8
Architecture: i386
Date: Wed Jun 20 13:41:39 2012
InstallationMedia: Ubuntu-Server 12.04 LTS "Precise Pangolin" - Release i386 
(20120424.1)
NmbdLog:
 Packet send failed to 10.0.2.255(138) ERRNO=Invalid argument
   Packet send failed to 10.0.2.255(138) ERRNO=Invalid argument
OtherFailedConnect: Yes
ProcEnviron:
 LANGUAGE=en_IE:en
 TERM=linux
 PATH=(custom, no user)
 LANG=en_IE.UTF-8
 SHELL=/bin/bash
SambaServerRegression: Yes
SmbConfIncluded: Yes
SourcePackage: samba
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: samba
     Importance: Unknown
         Status: Unknown

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport-bug i386 precise

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1015935

Title:
  SWAT segfaults when trying to view full configuration

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1015935/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to