[Bug 1094438] Re: Samba crashes invalid pointer: 0x00007f0bc3de7590

Wed Jan 9 03:54:23 UTC 2013

#0  0x00007f8f4377e425 in raise () from /lib/x86_64-linux-gnu/libc.so.6
(gdb) where
#0  0x00007f8f4377e425 in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x00007f8f43781b8b in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2  0x00007f8f46bcf53b in dump_core () at lib/fault.c:391
#3  0x00007f8f46bddc01 in smb_panic (why=<optimized out>) at lib/util.c:1133
#4  0x00007f8f46bcee88 in fault_report (sig=6) at lib/fault.c:53
#5  sig_fault (sig=6) at lib/fault.c:76
#6  <signal handler called>
#7  0x00007f8f4377e425 in raise () from /lib/x86_64-linux-gnu/libc.so.6
#8  0x00007f8f43781b8b in abort () from /lib/x86_64-linux-gnu/libc.so.6
#9  0x00007f8f437bc39e in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#10 0x00007f8f437c6b96 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#11 0x00007f8f45f1bb78 in gss_release_buffer () from /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2
#12 0x00007f8f46c4b182 in gse_get_pac_blob (gse_ctx=<optimized out>, mem_ctx=0x7f8f4778a4e0, pac_blob=<optimized out>) at librpc/crypto/gse.c:731
#13 0x00007f8f46ae21ab in gssapi_server_get_user_info (gse_ctx=0x7f8f47790030, mem_ctx=0x7f8f47786660, client_id=0x7f8f477705e8, server_info=0x7f8f47786688)
    at rpc_server/dcesrv_gssapi.c:127
#14 0x00007f8f46ad667d in pipe_gssapi_verify_final (mem_ctx=0x7f8f47786660, gse_ctx=0x7f8f47790030, client_id=0x7f8f477705e8, session_info=0x7f8f47786688)
    at rpc_server/srv_pipe.c:734
#15 0x00007f8f46ad806a in pipe_auth_verify_final (p=0x7f8f47786660) at rpc_server/srv_pipe.c:814
#16 0x00007f8f46ada25b in api_pipe_alter_context (pkt=0x7f8f47790f30, p=0x7f8f47786660) at rpc_server/srv_pipe.c:1403
#17 process_complete_pdu (p=0x7f8f47786660) at rpc_server/srv_pipe.c:1955
#18 0x00007f8f46ada94b in process_incoming_data (p=0x7f8f47786660, data=0x7f8f47792db4 "\270\020\270\020", n=<optimized out>) at rpc_server/srv_pipe_hnd.c:218
#19 0x00007f8f46adb02e in write_to_internal_pipe (n=177, data=0x7f8f47792db4 "\270\020\270\020", p=0x7f8f47786660) at rpc_server/srv_pipe_hnd.c:244
#20 np_write_send (mem_ctx=<optimized out>, ev=0x7f8f47770520, handle=<optimized out>, data=<optimized out>, len=177) at rpc_server/srv_pipe_hnd.c:538
#21 0x00007f8f468ef967 in reply_pipe_write_and_X (req=0x7f8f47792eb0) at smbd/pipes.c:322
#22 0x00007f8f468f9308 in reply_write_and_X (req=0x7f8f47792eb0) at smbd/reply.c:4529
#23 0x00007f8f4693bfa4 in switch_message (type=47 '/', req=0x7f8f47792eb0, size=245) at smbd/process.c:1574
#24 0x00007f8f4693c3bb in construct_reply (deferred_pcd=0x0, encrypted=false, seqnum=<optimized out>, unread_bytes=0, size=245, inbuf=0x0, sconn=0x7f8f477705e0)
    at smbd/process.c:1610
#25 process_smb (sconn=0x7f8f477705e0, inbuf=<optimized out>, nread=245, unread_bytes=0, seqnum=<optimized out>, encrypted=false, deferred_pcd=0x0) at smbd/process.c:1688
#26 0x00007f8f4693c7d3 in smbd_server_connection_read_handler (conn=0x7f8f477705e0, fd=24) at smbd/process.c:2317
#27 0x00007f8f46bed8ae in run_events_poll (num_pfds=2, pfds=0x7f8f4777b040, pollrtn=<optimized out>, ev=0x7f8f47770520) at lib/events.c:286
#28 run_events_poll (ev=0x7f8f47770520, pollrtn=<optimized out>, pfds=0x7f8f4777b040, num_pfds=2) at lib/events.c:184
#29 0x00007f8f4693df42 in smbd_server_connection_loop_once (conn=0x7f8f477705e0) at smbd/process.c:1017
#30 smbd_process (sconn=0x7f8f477705e0) at smbd/process.c:3158
#31 0x00007f8f46e4b66f in smbd_accept_connection (ev=<optimized out>, fde=<optimized out>, flags=<optimized out>, private_data=<optimized out>) at smbd/server.c:511
#32 0x00007f8f46bed8ae in run_events_poll (num_pfds=3, pfds=0x7f8f477732e0, pollrtn=<optimized out>, ev=0x7f8f47770520) at lib/events.c:286
#33 run_events_poll (ev=0x7f8f47770520, pollrtn=<optimized out>, pfds=0x7f8f477732e0, num_pfds=3) at lib/events.c:184
#34 0x00007f8f46beda4a in s3_event_loop_once (ev=0x7f8f47770520, location=<optimized out>) at lib/events.c:349
#35 0x00007f8f46bee5d0 in _tevent_loop_once (ev=0x7f8f47770520, location=0x7f8f470502d7 "smbd/server.c:844") at ../lib/tevent/tevent.c:494
#36 0x00007f8f468bc030 in smbd_parent_loop (parent=<optimized out>) at smbd/server.c:844
#37 main (argc=<optimized out>, argv=<optimized out>) at smbd/server.c:1326

** Attachment removed: "logs, configs"
   https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1094438/+attachment/3470091/+files/sambaerr.tar.gz

** Changed in: samba (Ubuntu)
       Status: Incomplete => New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1094438

Title:
  Samba crashes invalid pointer: 0x00007f0bc3de7590

Status in “samba” package in Ubuntu:
  New

Bug description:
  Ubuntu 12.04.1 LTS
  Samba 2:3.6.3-2ubuntu2.3
  krb5-config 2.2
  Samba on ubuntu joined to Windows 2003 domain
  Share on /media/100RAGE = /dev/md0 (software raid5)

  getent passwd, getent group working fine.
  All working fine, except I see errors in samba logs.

  We have two of the same server with the same configuration (differents
  only in hostname).

  Samba crushes everytime after opening shared folder from windows
  workstation on both servers.

    BACKTRACE: 30 stack frames:
     #0 smbd(log_stack_trace+0x1a) [0x7f4533d61aea]
     #1 smbd(smb_panic+0x25) [0x7f4533d61bc5]
     #2 smbd(+0x409e88) [0x7f4533d52e88]
     #3 /lib/x86_64-linux-gnu/libc.so.6(+0x364a0) [0x7f45309024a0]
     #4 /lib/x86_64-linux-gnu/libc.so.6(gsignal+0x35) [0x7f4530902425]
     #5 /lib/x86_64-linux-gnu/libc.so.6(abort+0x17b) [0x7f4530905b8b]
     #6 /lib/x86_64-linux-gnu/libc.so.6(+0x7439e) [0x7f453094039e]
     #7 /lib/x86_64-linux-gnu/libc.so.6(+0x7eb96) [0x7f453094ab96]
     #8 /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2(gss_release_buffer+0x28) [0x7f453309fb78]
     #9 smbd(gse_get_pac_blob+0x202) [0x7f4533dcf182]
     #10 smbd(gssapi_server_get_user_info+0x6b) [0x7f4533c661ab]
     #11 smbd(+0x31167d) [0x7f4533c5a67d]
     #12 smbd(+0x31306a) [0x7f4533c5c06a]
     #13 smbd(process_complete_pdu+0x102b) [0x7f4533c5e25b]
     #14 smbd(process_incoming_data+0x12b) [0x7f4533c5e94b]
     #15 smbd(np_write_send+0x14e) [0x7f4533c5f02e]
     #16 smbd(reply_pipe_write_and_X+0x167) [0x7f4533a73967]
     #17 smbd(reply_write_and_X+0x368) [0x7f4533a7d308]
     #18 smbd(+0x176fa4) [0x7f4533abffa4]
     #19 smbd(+0x1773bb) [0x7f4533ac03bb]
     #20 smbd(+0x1777d3) [0x7f4533ac07d3]
     #21 smbd(run_events_poll+0x34e) [0x7f4533d718ae]
     #22 smbd(smbd_process+0x812) [0x7f4533ac1f42]
     #23 smbd(+0x68666f) [0x7f4533fcf66f]
     #24 smbd(run_events_poll+0x34e) [0x7f4533d718ae]
     #25 smbd(+0x428a4a) [0x7f4533d71a4a]
     #26 smbd(_tevent_loop_once+0x90) [0x7f4533d725d0]
     #27 smbd(main+0xed0) [0x7f4533a40030]
     #28 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f45308ed76d]
     #29 smbd(+0xf7515) [0x7f4533a40515]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1094438/+subscriptions