Bug 1552163

Filing a bug for the libtirpc issue we discussed in IRC (#fedora-devel) today.

Description of problem: After update of libtirpc to mentioned version, I'm no longer able to mount NFS filesystems. The mount command crashes.


Version-Release number of selected component (if applicable):  1.0.2-4.rc2.fc27


How reproducible: Always


Steps to Reproduce:
1. Upgrade libtirpc to mentioned version 1.0.2-4.rc2.fc27
2. Mount NFS share with "mount -t nfs server:/share /import"
3. See that mount crashes
4. Downgrade libtirpc to libtirpc-1.0.2-4.fc27
5. mount again, works fine now

Actual results: mount fails with "double free or corruption"


Expected results: mount works fine, mounts NFS as expected


Additional info: Backtrace

#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007f65d286a381 in __GI_abort () at abort.c:79
#2  0x00007f65d28b2a67 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7f65d29db2f7 "%s\n") at ../sysdeps/posix/libc_fatal.c:181
#3  0x00007f65d28b99ba in malloc_printerr (str=str@entry=0x7f65d29dcec0 "double free or corruption (out)") at malloc.c:5368
#4  0x00007f65d28c193c in _int_free (have_lock=0, p=0x7ffecd938c00, av=0x7f65d2c0ec20 <main_arena>) at malloc.c:4285
#5  __GI___libc_free (mem=0x7ffecd938c10) at malloc.c:3125
#6  0x00007f65d308db10 in clnt_dg_call (cl=0x5636bf86fbc0, proc=3, xargs=0x7f65d30924e0 <xdr_pmap>, argsp=0x7ffecd939080, xresults=0x7f65d309eb60 <xdr_u_long>, resultsp=0x7ffecd939030, utimeout=...) at clnt_dg.c:465
#7  0x00005636becf104c in nfs_gp_pmap_getport (client=0x5636bf86fbc0, parms=<optimized out>, timeout=...) at getport.c:634
#8  0x00005636becf19e3 in nfs_gp_getport_pmap (timeout=..., protocol=<optimized out>, version=<optimized out>, program=<optimized out>, client=0x5636bf86fbc0) at getport.c:686
#9  nfs_gp_getport (client=0x5636bf86fbc0, sap=<optimized out>, program=<optimized out>, version=<optimized out>, protocol=<optimized out>, timeout=...) at getport.c:710
#10 0x00005636becf1c4e in nfs_getport_ping (sap=sap@entry=0x7ffecd939170, salen=salen@entry=16, program=100024, version=version@entry=1, protocol=protocol@entry=17) at getport.c:855
#11 0x00005636becf20c8 in nfs_probe_statd () at getport.c:1124
#12 0x00005636bece68a3 in start_statd () at network.c:797
#13 0x00005636becebcc5 in nfs_verify_lock_option (options=0x5636bf86b950) at stropts.c:306
#14 nfs_do_mount_v3v2 (checkv4=0, salen=<optimized out>, sap=<optimized out>, mi=0x7ffecd939470) at stropts.c:659
#15 nfs_try_mount_v3v2 (mi=mi@entry=0x7ffecd939470, checkv4=checkv4@entry=0) at stropts.c:702
#16 0x00005636becec25a in nfs_autonegotiate (mi=<optimized out>) at stropts.c:913
#17 nfs_try_mount (mi=mi@entry=0x7ffecd939470) at stropts.c:959
#18 0x00005636becec652 in nfsmount_fg (mi=0x7ffecd939470) at stropts.c:1041
#19 nfsmount_start (mi=0x7ffecd939470) at stropts.c:1191
#20 nfsmount_string (spec=<optimized out>, node=<optimized out>, type=<optimized out>, flags=<optimized out>, extra_opts=<optimized out>, fake=<optimized out>, child=0) at stropts.c:1224
#21 0x00005636becedaa5 in try_mount (cxt=0x5636bf867920, bg=0) at mount_libmount.c:125
#22 0x00005636bece4a99 in mount_main (argv=<optimized out>, argc=<optimized out>, cxt=0x5636bf867920) at mount_libmount.c:404
#23 main (argc=<optimized out>, argv=<optimized out>) at mount_libmount.c:455