Bug 2158365

Summary: segfault when modifying ECMP route
Product: Red Hat Enterprise Linux 9 Reporter: Gris Ge <fge>
Component: NetworkManagerAssignee: Fernando F. Mancera <ferferna>
Status: CLOSED ERRATA QA Contact: Vladimir Benes <vbenes>
Severity: high Docs Contact:
Priority: high    
Version: 9.1CC: bgalvani, fpokryvk, lrintel, rkhan, sukulkar, thaller, till, vbenes
Target Milestone: rcKeywords: Triaged
Target Release: ---Flags: pm-rhel: mirror+
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: NetworkManager-1.41.8-1.el9 Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-05-09 08:17:59 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Gris Ge 2023-01-05 08:18:11 UTC
Description of problem:

NetworkManager crashes when modifying ECMP routes:

[ 4877.289177] NetworkManager[2952]: segfault at 0 ip 00005634dd5ed217 sp 00007fff401f2df0 error 4 in NetworkManager[5634dd5de000+24d000]
[ 4877.289194] Code: bd 18 fe ff ff 48 89 85 10 fe ff ff e8 32 8e 18 00 48 8b bd 10 fe ff ff e8 c6 61 ff ff 8b 85 10 fe ff ff 89 03 4c 89 e0 eb d4 <48> 8b 04 25 00 00 00 00 0f 0b f3 0f 1e fa 48 89 c3 4d 85 ff 74 08




Version-Release number of selected component (if applicable):
NetworkManager-1.41.7-31563.copr.a92a0725b9.el9.x86_64


How reproducible:
100%

Steps to Reproduce:

nmcli c del dummy1 || true

nmcli c add type dummy \
    ifname dummy1 \
    connection.id dummy1 \
    ipv4.method manual \
    ipv4.address 192.0.2.5/24 \
    ipv4.routes "198.51.100.0/24 192.0.2.254 101 weight=1, \
                 198.51.100.0/24 192.0.2.253 101 weight=25"

nmcli c modify dummy1 \
    ipv4.routes "198.51.100.0/24 192.0.2.254 101, \
                 198.51.100.0/24 192.0.2.253 101"

nmcli c up dummy1


Actual results:

NetworkManager daemon crashes

Expected results:

NetworkManager daemon no crash


Additional info:

Since this is 100% reproducable and my VM seems not collecting crash coredump,
please do not ask me for coredump file.

Comment 1 Thomas Haller 2023-01-05 09:51:53 UTC
the crash should be fixed by https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/6c81f281eb324706615f649d4dd23e531ca58ee5

Fernando, please review (after already being merged).

Comment 5 errata-xmlrpc 2023-05-09 08:17:59 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (NetworkManager bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:2485