[Bug 1094438] Re: Samba crashes invalid pointer: 0x00007f0bc3de7590

[danb1974]

I tracked my crash to what appears to be missing structure
initialization, resulting in invalid pointers being free()d

Added two initializations, seems to fix the problem. Not being familiar
with samba, please confirm if I'm doing the right thing.


** Patch added: "samba-3.6.3-missing-gss-buffer-desc-init.patch"
   https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1094438/+attachment/4298408/+files/samba-3.6.3-missing-gss-buffer-desc-init.patch

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1094438

Title:
  Samba crashes invalid pointer: 0x00007f0bc3de7590

Status in samba package in Ubuntu:
  Confirmed

Bug description:
  Ubuntu 12.04.1 LTS
  Samba 2:3.6.3-2ubuntu2.3
  krb5-config 2.2
  Samba on ubuntu joined to Windows 2003 domain
  Share on /media/100RAGE = /dev/md0 (software raid5)

  getent passwd, getent group working fine.
  All working fine, except I see errors in samba logs.

  We have two of the same server with the same configuration (differents
  only in hostname).

  Samba crushes everytime after opening shared folder from windows
  workstation on both servers.

    BACKTRACE: 30 stack frames:
     #0 smbd(log_stack_trace+0x1a) [0x7f4533d61aea]
     #1 smbd(smb_panic+0x25) [0x7f4533d61bc5]
     #2 smbd(+0x409e88) [0x7f4533d52e88]
     #3 /lib/x86_64-linux-gnu/libc.so.6(+0x364a0) [0x7f45309024a0]
     #4 /lib/x86_64-linux-gnu/libc.so.6(gsignal+0x35) [0x7f4530902425]
     #5 /lib/x86_64-linux-gnu/libc.so.6(abort+0x17b) [0x7f4530905b8b]
     #6 /lib/x86_64-linux-gnu/libc.so.6(+0x7439e) [0x7f453094039e]
     #7 /lib/x86_64-linux-gnu/libc.so.6(+0x7eb96) [0x7f453094ab96]
     #8 /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2(gss_release_buffer+0x28) [0x7f453309fb78]
     #9 smbd(gse_get_pac_blob+0x202) [0x7f4533dcf182]
     #10 smbd(gssapi_server_get_user_info+0x6b) [0x7f4533c661ab]
     #11 smbd(+0x31167d) [0x7f4533c5a67d]
     #12 smbd(+0x31306a) [0x7f4533c5c06a]
     #13 smbd(process_complete_pdu+0x102b) [0x7f4533c5e25b]
     #14 smbd(process_incoming_data+0x12b) [0x7f4533c5e94b]
     #15 smbd(np_write_send+0x14e) [0x7f4533c5f02e]
     #16 smbd(reply_pipe_write_and_X+0x167) [0x7f4533a73967]
     #17 smbd(reply_write_and_X+0x368) [0x7f4533a7d308]
     #18 smbd(+0x176fa4) [0x7f4533abffa4]
     #19 smbd(+0x1773bb) [0x7f4533ac03bb]
     #20 smbd(+0x1777d3) [0x7f4533ac07d3]
     #21 smbd(run_events_poll+0x34e) [0x7f4533d718ae]
     #22 smbd(smbd_process+0x812) [0x7f4533ac1f42]
     #23 smbd(+0x68666f) [0x7f4533fcf66f]
     #24 smbd(run_events_poll+0x34e) [0x7f4533d718ae]
     #25 smbd(+0x428a4a) [0x7f4533d71a4a]
     #26 smbd(_tevent_loop_once+0x90) [0x7f4533d725d0]
     #27 smbd(main+0xed0) [0x7f4533a40030]
     #28 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f45308ed76d]
     #29 smbd(+0xf7515) [0x7f4533a40515]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1094438/+subscriptions