Bug 1144765

Summary: [abrt] sssd-common: dbus_watch_handle(): sssd killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Dennis Gilmore <dennis>
Component: sssdAssignee: Jakub Hrozek <jhrozek>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 21CC: abokovoy, atikhono, dennis, jhrozek, lslebodn, pbrezina, preichl, sbose, sgallagh, ssorce
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/bf7dae48444c43b6d25d3c47462fc5710c90b6f7
Whiteboard: abrt_hash:425e83249072a6341fa6bbc80f37466f1770e5f7
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-10-14 06:54:44 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Dennis Gilmore 2014-09-20 14:33:04 UTC 
Description of problem:
running sssd under normal conditions on my mail server it keeps crashing

Version-Release number of selected component:
sssd-common-1.12.0-7.fc21

Additional info:
reporter:       libreport-2.2.3
backtrace_rating: 4
cmdline:        /usr/sbin/sssd -D -f
crash_function: dbus_watch_handle
executable:     /usr/sbin/sssd
kernel:         3.16.2-301.fc21.x86_64
runlevel:       N 3
type:           CCpp
uid:            0

Truncated backtrace:
Thread no. 1 (9 frames)
 #0 dbus_watch_handle at dbus-watch.c:683
 #1 sbus_watch_handler at src/sbus/sssd_dbus_common.c:94
 #2 epoll_event_loop at ../tevent_epoll.c:728
 #3 epoll_event_loop_once at ../tevent_epoll.c:926
 #4 std_event_loop_once at ../tevent_standard.c:114
 #5 _tevent_loop_once at ../tevent.c:530
 #6 tevent_common_loop_wait at ../tevent.c:634
 #7 std_event_loop_wait at ../tevent_standard.c:140
 #8 server_loop at src/util/server.c:587
Comment 1 Dennis Gilmore 2014-09-20 14:33:07 UTC 
Created attachment 939553 [details]
File: backtrace
Comment 2 Dennis Gilmore 2014-09-20 14:33:08 UTC 
Created attachment 939554 [details]
File: cgroup
Comment 3 Dennis Gilmore 2014-09-20 14:33:09 UTC 
Created attachment 939555 [details]
File: core_backtrace
Comment 4 Dennis Gilmore 2014-09-20 14:33:10 UTC 
Created attachment 939556 [details]
File: dso_list
Comment 5 Dennis Gilmore 2014-09-20 14:33:11 UTC 
Created attachment 939557 [details]
File: environ
Comment 6 Dennis Gilmore 2014-09-20 14:33:11 UTC 
Created attachment 939558 [details]
File: exploitable
Comment 7 Dennis Gilmore 2014-09-20 14:33:12 UTC 
Created attachment 939559 [details]
File: limits
Comment 8 Dennis Gilmore 2014-09-20 14:33:13 UTC 
Created attachment 939560 [details]
File: maps
Comment 9 Dennis Gilmore 2014-09-20 14:33:14 UTC 
Created attachment 939561 [details]
File: open_fds
Comment 10 Dennis Gilmore 2014-09-20 14:33:15 UTC 
Created attachment 939562 [details]
File: proc_pid_status
Comment 11 Dennis Gilmore 2014-09-20 14:33:16 UTC 
Created attachment 939563 [details]
File: var_log_messages
Comment 12 Lukas Slebodnik 2014-09-22 07:57:24 UTC 
According to /var/log/mesages, the main process /usr/sbin/sssd crashed, which is really bad.
Sep 20 04:13:39 mail02.ausil.us sssd[649]: [46B blob data]
Sep 20 04:14:39 mail02.ausil.us sssd[649]: [64B blob data]
Sep 20 04:14:39 mail02.ausil.us kernel: sssd[649]: segfault at a4 ip 00007f55b2f7baa1 sp 00007fff693fe030 error 4 in libdbus-1.so.3.8.6[7f55b2f55000+47000]
Sep 20 04:14:39 mail02.ausil.us abrt-hook-ccpp[1759]: Saved core dump of pid 649 (/usr/sbin/sssd) to /var/tmp/abrt/ccpp-2014-09-20-04:14:39-649 (1933312 bytes)

The process crashed because pointer watch (of type DBusWatch *) has very low value. It can be uninitialized variable or use after free.
Thread 1 (LWP 649):
#0  dbus_watch_handle (watch=0xa0, flags=flags@entry=2) at dbus-watch.c:683
        __FUNCTION__ = "dbus_watch_handle"


Could you put "debug_level = 9" into sssd section and provide log files from directory /var/log/sssd?

You can also try to upgrade into sssd-1.12.1-2.fc21, which is in updates-testing.
Comment 13 Lukas Slebodnik 2015-10-14 06:54:44 UTC 
The necessary information were not provided  in last year :-)

I believe this is the same case as in upstream ticket
https://fedorahosted.org/sssd/ticket/2525.
And it is already fixed in 1.12.4 and fedora 21 already contains sssd-1.12.5-3.fc21.
Comment 14 Lukas Slebodnik 2015-10-14 06:58:11 UTC 
It is indirectly pr(In reply to Lukas Slebodnik from comment #13)
> The necessary information were not provided  in last year :-)
> 
> I believe this is the same case as in upstream ticket
> https://fedorahosted.org/sssd/ticket/2525.
> And it is already fixed in 1.12.4 and fedora 21 already contains
> sssd-1.12.5-3.fc21.

It might be indirectly proved by abrt report linked with this ticket.
https://retrace.fedoraproject.org/faf/reports/349418/
It only crashed with older version of sssd.
sssd-common 	        5
0:1.11.4-1.fc20 	3
0:1.12.0-7.fc21 	1
0:1.11.7-2.fc20 	1
Comment 15 Alexey Tikhonov 2019-11-12 13:56:32 UTC 
For the record, it seems the reason of this ticket was the same as bz 1767159