Bug 1302959

Created attachment 1119370 [details]
console.crash.log

Description of problem:
During automated run of ipa-trust functional using RHEL 7.2.z IPA server, RHEL 6.7.z IPA client with Windows 2012 r2 got following failure in SSHD 

:[New LWP 1279]
:[Thread debugging using libthread_db enabled]
:Using host libthread_db library "/lib64/libthread_db.so.1".
:Core was generated by `sshd: IPAAD2012R2\\ad'.
:Program terminated with signal 6, Aborted.
:#0  0x00007f2c065275f7 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
:56	../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
:
:Thread 1 (Thread 0x7f2c09356840 (LWP 1279)):
:#0  0x00007f2c065275f7 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
:        resultvar = 0
:        pid = 1279
:        selftid = 1279
:#1  0x00007f2c06528ce8 in __GI_abort () at abort.c:90
:        save_stage = 2
:        act = {__sigaction_handler = {sa_handler = 0x7f2c0666e234, sa_sigaction = 0x7f2c0666e234}, sa_mask = {__val = {3, 140730717619259, 5, 139827062690823, 1, 139827062699507, 3, 140730717619236, 12, 139827062699511, 2, 139827062699511, 2, 140730717620048, 140730717620048, 140730717621808}}, sa_flags = 11, sa_restorer = 0x7ffe6c6ec950}
:        sigs = {__val = {32, 0 <repeats 15 times>}}
:#2  0x00007f2c06567317 in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x7f2c06670988 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:196
:        ap = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffe6c6ece40, reg_save_area = 0x7ffe6c6ecd50}}
:        ap_copy = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7ffe6c6ece40, reg_save_area = 0x7ffe6c6ecd50}}
:        fd = 2
:        on_2 = <optimized out>
:        list = <optimized out>
:        nlist = <optimized out>
:        cp = <optimized out>
:        written = <optimized out>
:#3  0x00007f2c0656dd95 in malloc_printerr (ar_ptr=0x7f2c068ac760 <main_arena>, ptr=<optimized out>, str=0x7f2c0666e057 "corrupted double-linked list", action=3) at malloc.c:5013
:        buf = "00007f2c0a996260"
:        cp = <optimized out>
:        ar_ptr = 0x7f2c068ac760 <main_arena>
:        ptr = <optimized out>
:        str = 0x7f2c0666e057 "corrupted double-linked list"
:        action = 3
:#4  malloc_consolidate (av=0x7f2c068ac760 <main_arena>) at malloc.c:4160
:        fb = <optimized out>
:        maxfb = 0x7f2c068ac7b0 <main_arena+80>
:        p = 0x7f2c0a996220
:        nextp = 0x0
:        unsorted_bin = 0x7f2c068ac7b8 <main_arena+88>
:        first_unsorted = <optimized out>
:        nextchunk = <optimized out>
:        size = 112
:        nextsize = <optimized out>
:        prevsize = <optimized out>
:        nextinuse = <optimized out>
:        bck = <optimized out>
:        fwd = <optimized out>
:#5  0x00007f2c0656fe35 in _int_malloc (av=0x7f2c068ac760 <main_arena>, bytes=14) at malloc.c:3431
:        nb = 1088
:        bit = 0
:        map = 1279
:        errstr = 0x4ff <Address 0x4ff out of bounds>
:#6  0x00007f2c0657187c in __GI___libc_malloc (bytes=1072) at malloc.c:2881
:        ar_ptr = 0x7f2c068ac760 <main_arena>
:        victim = 0x6


Please look at attachment for full failure.


Version-Release number of selected component (if applicable):
ipa-server          - 4.2.0-15.el7_2.5
ipa-server-trust-ad - 4.2.0-15.el7_2.5

Client 
sssd - sssd-1.12.4-47.el6_7.7.x86_64

How reproducible:
Always