[Bug 216358] Re: Samba crashes repeatedly to assert_uid

[Chuck Short]

** Changed in: samba (Ubuntu)
       Status: Incomplete => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/216358

Title:
  Samba crashes repeatedly to assert_uid

Status in Samba:
  Confirmed
Status in “glibc” package in Ubuntu:
  Incomplete
Status in “samba” package in Ubuntu:
  Won't Fix
Status in “glibc” source package in Intrepid:
  Invalid
Status in “samba” source package in Intrepid:
  Won't Fix

Bug description:
  Binary package hint: samba

  My Samba has been working fine for years now, month or two of that on
  Hardy binaries and out of sudden it started to crash. It has now
  crashed six times in 20 minutes with following stack dump:

  [Thread debugging using libthread_db enabled]
  [New Thread 0xb7af76d0 (LWP 7307)]
  0xffffe410 in __kernel_vsyscall ()
  #0  0xffffe410 in __kernel_vsyscall ()
  #1  0xb7c133c3 in waitpid () from /lib/tls/i686/cmov/libc.so.6
  #2  0xb7bb6533 in ?? () from /lib/tls/i686/cmov/libc.so.6
  #3  0xb7d7ed7d in system () from /lib/tls/i686/cmov/libpthread.so.0
  #4  0x0828aab8 in smb_panic (why=0x83bee31 "failed to set uid\n")
      at lib/util.c:1639
  #5  0x08290cee in assert_uid (ruid=4294967295, euid=65534)
      at lib/util_sec.c:102
  #6  0x080ffe9c in become_id (uid=65534, gid=65534) at smbd/sec_ctx.c:57
  #7  0x08100245 in set_sec_ctx (uid=65534, gid=65534, ngroups=0, groups=0x0, 
      token=0x850fe68) at smbd/sec_ctx.c:280
  #8  0x080f3f38 in change_to_user (conn=0x851eac8, vuid=101) at smbd/uid.c:259
  #9  0x08113221 in make_connection_snum (snum=6, vuser=0x851d818, password=
        {data = 0x84f9970 "", length = 1, free = 0x8287760 <free_data_blob>}, 
      pdev=0xbfc79058 "?????", status=0xbfc792e8) at smbd/service.c:926
  #10 0x08114bf7 in make_connection (service_in=0xbfc797ec "IPC$", password=
        {data = 0x84f9970 "", length = 1, free = 0x8287760 <free_data_blob>}, 
      pdev=0xbfc796ec "?????", vuid=101, status=0xbfc792e8)
      at smbd/service.c:1207
  #11 0x080d5657 in reply_tcon_and_X (conn=0x0, inbuf=0x85233f8 "", 
      outbuf=0x8543840 "", length=80, bufsize=131072) at smbd/reply.c:508
  #12 0x0810f89e in switch_message (type=117, inbuf=0x85233f8 "", 
      outbuf=0x8543840 "", size=80, bufsize=131072) at smbd/process.c:1003
  #13 0x08110cfb in smbd_process () at smbd/process.c:1030
  #14 0x0835e8f8 in main (argc=-1212455959, argv=0xbfc79d54)
      at smbd/server.c:1120
  The program is running.  Quit anyway (and detach it)? (y or n) [answered Y; input not from terminal]

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/216358/+subscriptions