Attachment 611492 Details for Bug 855935 – File: backtrace

File: backtrace

backtrace (text/plain), 12.90 KB, created by James Cape on 2012-09-10 16:36:37 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: James Cape

Created: 2012-09-10 16:36:37 UTC

Size: 12.90 KB

patch

obsolete

>[New LWP 7036]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/sbin/ipa_kpasswd'.
>Program terminated with signal 11, Segmentation fault.
>#0  0x000000396a082b74 in free () from /lib64/libc.so.6
>
>Thread 1 (Thread 0x7f3cd74767c0 (LWP 7036)):
>#0  0x000000396a082b74 in free () from /lib64/libc.so.6
>No symbol table info available.
>#1  0x000000000040313d in ldap_pwd_change (client_name=<optimized out>, realm_name=<optimized out>, pwd=..., errstr=0x7fff02140018) at ipa_kpasswd.c:678
>        tmp_file = <optimized out>
>        version = 2
>        ld = 0x0
>        ctrl = <optimized out>
>        sctrl = <optimized out>
>        control = 0x0
>        newpw = {bv_len = 694750536426141097, bv_val = 0x542a54a1923fbb8b <Address 0x542a54a1923fbb8b out of bounds>}
>        hostname = "\031\000\000\000\000\000\000\000\070\246G\327<\177\000\000_\246\070\273\000\000\000\000\036\241\300i9\000\000\000\n\373\330\242\212\345\334\235\037\000\000\000\000\000\000\000\220\374\023\002\377\177\000\000\231\342\354\002\000\000\000\000@\202\213\327<\177\000\000\020\206\213\327<\177", '\000' <repeats 11 times>"\300, \213\327<\177\000\000\300\374\023\002\377\177\000\000RF{\003", '\000' <repeats 12 times>, "h\253G\327<\177\000\000\030P\271\327<\177\000\000d\331\213\327<\177\000\000\310\326\213\327<\177\000\000\000\300\213\327<\177\000\000\000\000\000\000\001\000\000\000j\002\000\000\001\000\000\000\030P\271\327<\177\000\000pS\271\327<\177\000\000\320\374\023\002\377\177\000\000_\246\070\273\000\000\000\000h\253G\327<\177\000\000\370\374\023\002\377\177\000\000\030P\271\327<\177\000\000\023\244\300i9", '\000' <repeats 11 times>, "h\253G\327<\177\000\000\001\000\000\000<\177\000\000\000\000\000\000\000\000\000\000"...
>        uri = 0x12840dd90c80b142 <Address 0x12840dd90c80b142 out of bounds>
>        ncvals = <optimized out>
>        filter = 0x819486d32b6beb7 <Address 0x819486d32b6beb7 out of bounds>
>        attrs = {0x4058c1 "krbprincipalname", 0x0}
>        root_attrs = {0x4058d2 "namingContexts", 0x0}
>        userdn = <optimized out>
>        retoid = 0x0
>        retdata = 0x0
>        tv = {tv_sec = 1228442766109574476, tv_usec = -1434968008569067170}
>        entry = <optimized out>
>        res = 0x0
>        srvctrl = 0x0
>        exterr0 = <optimized out>
>        exterr1 = 0x0
>        exterr2 = 0x0
>        err = 0x0
>        msgid = 0
>        ret = <optimized out>
>        rc = 3
>        fd = <optimized out>
>        kpwd_err = <optimized out>
>        i = <optimized out>
>#2  0x0000000000404af6 in handle_krb_packets (buf=<optimized out>, buflen=<optimized out>, sd=<optimized out>, from=<optimized out>, repbuf=0x7fff02140088, replen=0x7fff02140090) at ipa_kpasswd.c:917
>        auth_context = 0x11d95a0
>        context = 0x11d8ea0
>        keytab = 0x11da870
>        kprincpw = 0x11d8980
>        ticket = 0x11dd9c0
>        lkaddr = {magic = -1, addrtype = 2, length = 4, contents = 0x11d88f4 "\n\003A\004"}
>        rkaddr = {magic = 0, addrtype = 2, length = 4, contents = 0x7fff02140684 "\n\201yX"}
>        kreq = {magic = 1, length = 519, data = 0x7fff021400a6 "n\202\002\003\060\202\001\377\240\003\002\001\005\241\003\002\001\016\242\a\003\005"}
>        krep = {magic = -1760647422, length = 140, data = 0x11de300 "o\201\211\060\201\206\240\003\002\001\005\241\003\002\001\017\242z0x\240\003\002\001\022\242q\004ol\262@\274\221\215\334\372=\307\221\370\343E\037\320\241\004\360oq8\034\253juL\242\\\351@\311\235\327\342\222\332\332`q\255\002\331s\201\037n\r\242\340\351\372\226\372\263\064\300~eM?ZQ5V\306`S\325z\340Q\327\v\243\t\200oT\324?\251M\221\034\311\065\203\070\066\366eP#\036E\371\236\065\335c\033%\360\341\351\332\351\265\346\371"}
>        kenc = {magic = 0, length = 88, data = 0x7fff021402ad "uV0T\240\003\002\001\005\241\003\002\001\025\243H0F\240\003\002\001\022\242?\004=\346e\330\223P\030\001A\037\212\270\030\262W[\022\251\066\236\236\273JW\375\307\034]\233'\001\334*p\024\270\f\253\336*\271\342\347\231\327\372\060sN\360\242\330\373\n\235\334\345\212\036\357.#\261\271\063\235g\337<\262T"}
>        kdec = {magic = 0, length = 8, data = 0x11de2b0 "Dfq3eP4c\036\357.#\035c\314\364\366\333\221\305"}
>        replay = {timestamp = 0, usec = 0, seq = 34865136}
>        krb5err = {magic = 621, ctime = 0, cusec = 34865308, susec = 32767, stime = 1778452696, error = 57, client = 0x7f3cd768b000, server = 0x396a00a920, text = {magic = -681005056, length = 32572, data = 0x2000000000 <Address 0x2000000000 out of bounds>}, e_data = {magic = 0, length = 0, data = 0xffffffff <Address 0xffffffff out of bounds>}}
>        krberr = 0
>        reqlen = <optimized out>
>        verno = <optimized out>
>        client_name = 0x11dad40 "user.name@EXAMPLE.COM"
>        realm_name = 0x11d73b0 "EXAMPLE.COM"
>        result_string = 0x0
>        result_err = <optimized out>
>        reply = <optimized out>
>        replylen = <optimized out>
>#3  0x00000000004050bd in handle_conn (sd=0x11d88e0) at ipa_kpasswd.c:1142
>        mfd = 0
>        tcp = 0
>        pid = 0
>        addrto6 = "10.129.121.88\000\000\000\001", '\000' <repeats 15 times>, "@\000\000\000\000\000\000\000\360\325\000j9\000"
>        address = "::ffff:10.129.121.88\000\000\000\001", '\000' <repeats 15 times>, "@\000\000\000\000\000\000"
>        request = "\002e\000\001\002\an\202\002\003\060\202\001\377\240\003\002\001\005\241\003\002\001\016\242\a\003\005\000\000\000\000\000\243\202\001Ca\202\001?0\202\001;\240\003\002\001\005\241\r\033\vEXAMPLE.COM\242\035\060\033\240\003\002\001\001\241\024\060\022\033\006kadmin\033\bchangepw\243\202\001\004\060\202\001\000\240\003\002\001\022\241\003\002\001\002\242\201\363\004\201\360\067\261\"jZ\327\211-\272+\262\v\025\035\371[\321/\317\071\332\262\002\063\020\277\372\261s^\357\232\324\241\005\207\315C\323\245\250\035\354\223\365-;\341\351m\000:\336\251\027i)\337\346\361\244\336'\375\357^\212Q\246zec\374A\na\n\222\307\025Y\316\352\322H\tm\303^S\236\316\352\216\325\352i\227\023\347\373f\236[\376\064-\247r>\332gC`/\276\022\366\343\376\355\017\065aV\214\241w\016\021\325\305\220\362\270\020~\235pe8\375[;\023Q\302\022{K\201\316\b\272E\376\315\002$\330\235\227\251hr? 9m\216\244\fb\026\060s\247]T\270\337\206\071@\363\246\350\224\aa\264\265(\004\370\022\324\335 \a\310N\210\212\t"...
>        reqlen = 613
>        reply = <optimized out>
>        replen = <optimized out>
>        from = {ss_family = 2, __ss_align = 0, __ss_padding = "\360\325\000j9\000\000\000\000\260h\327<\177\000\000\000\207\035\001", '\000' <repeats 12 times>, "\001", '\000' <repeats 15 times>"\377, \377\377\377", '\000' <repeats 12 times>, "\001\000\000\000\000\000\000\000\260\215\035\001\000\000\000\000 e`", '\000' <repeats 13 times>, "\b", '\000' <repeats 14 times>}
>        fromlen = 16
>        sendret = <optimized out>
>        ret = <optimized out>
>#4  0x0000000000402946 in main (argc=<optimized out>, argv=<optimized out>) at ipa_kpasswd.c:1407
>        cstatus = 0
>        cid = <optimized out>
>        pid = <optimized out>
>        ifa = 0x11d7a20
>        tifa = <optimized out>
>        ai = 0x11d8bb0
>        tai = <optimized out>
>        hints = {ai_flags = 4, ai_family = 0, ai_socktype = 0, ai_protocol = 0, ai_addrlen = 0, ai_addr = 0x0, ai_canonname = 0x0, ai_next = 0x0}
>        host = "fe80::5054:ff:fe03:efd7%eth0\000\000\000\000\000\000\000\000\001\000\000\000\202\b\000\000\001", '\000' <repeats 11 times>"\340, \065\342i9\000\000\000\340\t\024\002\377\177\000\000\207\360\226|\000\000\000\000\230\204G\327<\177\000\000\260\n\024\002\377\177\000\000\230)\342i9\000\000\000\064\231\300i9", '\000' <repeats 11 times>, "\006\000\000\000\000\000\000\000\031\000\000\000\000\000\000\000\070\246G\327<\177\000\000\001#\371\244\000\000\000\000\036\241\300i9\000\000\000\220\b\024\002\377\177\000\000\001\000\000\000\000\000\000\000\240\n\024\002\377\177\000\000\214\344\223\002\000\000\000\000\350'\000j9\000\000\000\250<\000j9", '\000' <repeats 11 times>, "x\215\000j9\000\000\000\031\000\000\000\000\000\000\000\070\246G\327<\177"...
>        sds = 0x11d8700
>        csd = 0x11d88e0
>        pfds = 0x11d8db0
>        nfds = 8
>        ret = <optimized out>
>        env = <optimized out>
>        pid_file = 0x405d5f "/var/run/ipa_kpasswd.pid"
>        f = <optimized out>
>        fail = 0
>From                To                  Syms Read   Shared Object Library
>0x00007f3cd7def5e0  0x00007f3cd7df6948  Yes         /usr/lib64/liblber-2.4.so.2
>0x00007f3cd7ba6a50  0x00007f3cd7bd78e8  Yes         /usr/lib64/libldap_r-2.4.so.2
>0x00007f3cd78d1750  0x00007f3cd79453b8  Yes         /lib64/libkrb5.so.3
>0x00007f3cd7690790  0x00007f3cd76a92b8  Yes         /lib64/libk5crypto.so.3
>0x000000396c8013b0  0x000000396c801fac  Yes         /lib64/libcom_err.so.2
>0x000000396a01ef10  0x000000396a15bb70  Yes (*)     /lib64/libc.so.6
>0x000000396c003940  0x000000396c014018  Yes (*)     /lib64/libresolv.so.2
>0x00000039e4809580  0x00000039e482d3e8  Yes (*)     /usr/lib64/libssl3.so
>0x00000039e5009be0  0x00000039e5021e68  Yes (*)     /usr/lib64/libsmime3.so
>0x00000039e2418a60  0x00000039e24fa208  Yes (*)     /usr/lib64/libnss3.so
>0x00000039e2c0a930  0x00000039e2c15bd8  Yes (*)     /usr/lib64/libnssutil3.so
>0x00000039e3400ef0  0x00000039e3401e28  Yes (*)     /lib64/libplds4.so
>0x00000039e3001410  0x00000039e3002b08  Yes (*)     /lib64/libplc4.so
>0x00000039e1c0d130  0x00000039e1c2c5f8  Yes (*)     /lib64/libnspr4.so
>0x00000039e6404750  0x00000039e64147c8  Yes         /usr/lib64/libsasl2.so.2
>0x000000396a805700  0x000000396a810b88  Yes (*)     /lib64/libpthread.so.0
>0x00007f3cd747f860  0x00007f3cd74849f8  Yes         /lib64/libkrb5support.so.0
>0x000000396d000ff0  0x000000396d001a28  Yes         /lib64/libkeyutils.so.1
>0x0000003969c00b20  0x0000003969c1aaaa  Yes (*)     /lib64/ld-linux-x86-64.so.2
>0x000000396a400de0  0x000000396a401918  Yes (*)     /lib64/libdl.so.2
>0x000000396ac01e90  0x000000396ac0e688  Yes (*)     /lib64/libz.so.1
>0x00000039e2800c60  0x00000039e2805ce8  Yes (*)     /lib64/libcrypt.so.1
>0x000000396b405d00  0x000000396b416068  Yes         /lib64/libselinux.so.1
>0x00000039e4003460  0x00000039e40421c8  Yes (*)     /lib64/libfreebl3.so
>0x00007f3cd726b130  0x00007f3cd72729a8  Yes (*)     /lib64/libnss_files.so.2
>(*): Shared library is missing debugging information.
>$1 = 0x0
>No symbol "__glib_assert_msg" in current context.
>rax            0x0	0
>rbx            0x11d9550	18715984
>rcx            0x396a3b1718	246595393304
>rdx            0x0	0
>rsi            0xffffffff	4294967295
>rdi            0x819486d32b6beb7	583577260560662199
>rbp            0x2	0x2
>rsp            0x7fff0213f888	0x7fff0213f888
>r8             0x0	0
>r9             0x0	0
>r10            0x4000	16384
>r11            0x246	582
>r12            0x0	0
>r13            0xffffffff	4294967295
>r14            0x7fff02140018	140733228253208
>r15            0x7fff0213f970	140733228251504
>rip            0x396a082b74	0x396a082b74 <free+20>
>eflags         0x10206	[ PF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function free:
>   0x000000396a082b60 <+0>:	mov    0x32e359(%rip),%rax        # 0x396a3b0ec0
>   0x000000396a082b67 <+7>:	mov    (%rax),%rax
>   0x000000396a082b6a <+10>:	test   %rax,%rax
>   0x000000396a082b6d <+13>:	jne    0x396a082be2 <free+130>
>   0x000000396a082b6f <+15>:	test   %rdi,%rdi
>   0x000000396a082b72 <+18>:	je     0x396a082be0 <free+128>
>=> 0x000000396a082b74 <+20>:	mov    -0x8(%rdi),%rax
>   0x000000396a082b78 <+24>:	lea    -0x10(%rdi),%rsi
>   0x000000396a082b7c <+28>:	test   $0x2,%al
>   0x000000396a082b7e <+30>:	jne    0x396a082ba0 <free+64>
>   0x000000396a082b80 <+32>:	test   $0x4,%al
>   0x000000396a082b82 <+34>:	lea    0x32eb77(%rip),%rdi        # 0x396a3b1700 <main_arena>
>   0x000000396a082b89 <+41>:	je     0x396a082b97 <free+55>
>   0x000000396a082b8b <+43>:	mov    %rsi,%rax
>   0x000000396a082b8e <+46>:	and    $0xfffffffffc000000,%rax
>   0x000000396a082b94 <+52>:	mov    (%rax),%rdi
>   0x000000396a082b97 <+55>:	xor    %edx,%edx
>   0x000000396a082b99 <+57>:	jmpq   0x396a07e870 <_int_free>
>   0x000000396a082b9e <+62>:	xchg   %ax,%ax
>   0x000000396a082ba0 <+64>:	mov    0x32e5ee(%rip),%edx        # 0x396a3b1194 <mp_+52>
>   0x000000396a082ba6 <+70>:	test   %edx,%edx
>   0x000000396a082ba8 <+72>:	jne    0x396a082bd0 <free+112>
>   0x000000396a082baa <+74>:	cmp    0x32e5bf(%rip),%rax        # 0x396a3b1170 <mp_+16>
>   0x000000396a082bb1 <+81>:	jbe    0x396a082bd0 <free+112>
>   0x000000396a082bb3 <+83>:	cmp    $0x2000000,%rax
>   0x000000396a082bb9 <+89>:	ja     0x396a082bd0 <free+112>
>   0x000000396a082bbb <+91>:	and    $0xfffffffffffffff8,%rax
>   0x000000396a082bbf <+95>:	mov    %rax,0x32e5aa(%rip)        # 0x396a3b1170 <mp_+16>
>   0x000000396a082bc6 <+102>:	add    %rax,%rax
>   0x000000396a082bc9 <+105>:	mov    %rax,0x32e590(%rip)        # 0x396a3b1160 <mp_>
>   0x000000396a082bd0 <+112>:	mov    %rsi,%rdi
>   0x000000396a082bd3 <+115>:	jmpq   0x396a07df80 <munmap_chunk>
>   0x000000396a082bd8 <+120>:	nopl   0x0(%rax,%rax,1)
>   0x000000396a082be0 <+128>:	repz retq 
>   0x000000396a082be2 <+130>:	mov    (%rsp),%rsi
>   0x000000396a082be6 <+134>:	jmpq   *%rax
>End of assembler dump.

Actions: View

Attachments on bug 855935: 611490 | 611491 | 611492