Bug 554744

I'm afraid this isn't enough to go on.  If it is reproducible, then please collect the information requested here:
  http://people.redhat.com/jmoyer

Thanks!

I have another crash with general protection in libc.so, this time called from rpc.mountd.

Jan 19 12:26:26 xxx kernel: rpc.mountd[2822] general protection ip:7f1723f582f2 sp:7fff1ae34738 error:0 in libc-2.11.1.so[7f1723ed9000+16f000]
Jan 19 12:26:26 xxx abrtd: Directory 'ccpp-1263900386-2822' creation detected
Jan 19 12:26:26 xxx abrtd: Lock file '/var/cache/abrt/ccpp-1263900386-2822.lock' is locked by process 7248
Jan 19 12:26:27 xxx abrt: saved core dump of pid 2822 (/usr/sbin/rpc.mountd) to /var/cache/abrt/ccpp-1263900386-2822/coredump (999424 bytes)
Jan 19 12:26:27 xxx abrtd: Lokale, universelle, eindeutige Identifikation abrufen ...
Jan 19 12:26:28 xxx abrtd: New crash, saving
Jan 19 12:26:28 xxx abrtd: RunApp('/var/cache/abrt/ccpp-1263900386-2822','"test x\"`cat component`\" = x\"xorg-x11-server-Xorg\" && cp /var/log/Xorg.0.log ."')


Here the backtrace:

# gdb /usr/sbin/rpc.mountd /var/cache/abrt/ccpp-1263900386-2822/coredump

Core was generated by `rpc.mountd'.
Program terminated with signal 11, Segmentation fault.
#0  __strlen_sse2 () at ../sysdeps/x86_64/strlen.S:31
31		pcmpeqb	(%rdi), %xmm2
(gdb) where
#0  __strlen_sse2 () at ../sysdeps/x86_64/strlen.S:31
#1  0x00007f172426cb47 in xdr_string (xdrs=0x7f17265f7678, cpp=0x7fff1ae34998, maxsize=4294967295) at xdr.c:673
#2  0x00007f172425fb2a in clnt_vc_call (cl=<value optimized out>, proc=<value optimized out>, 
    xdr_args=<value optimized out>, args_ptr=<value optimized out>, xdr_results=<value optimized out>, 
    results_ptr=<value optimized out>, timeout=...) at clnt_vc.c:367
#3  0x00007f1723cc4e30 in yp_bind_ypbindprog (domain=0x726f66203739363a <Address 0x726f66203739363a out of bounds>, 
    ysd=0x7f17265f6410) at ypclnt.c:143
#4  0x00007f1723cc584f in do_ypcall (domain=0x726f66203739363a <Address 0x726f66203739363a out of bounds>, 
    prog=<value optimized out>, xargs=<value optimized out>, req=<value optimized out>, 
    xres=0x7f1723cc4450 <xdr_ypresp_val>, resp=<value optimized out>) at ypclnt.c:363
#5  0x00007f1723cc63b1 in do_ypcall_tr (resp=<value optimized out>, xres=0x4450, req=<value optimized out>, 
    xargs=0x4750, prog=3, domain=<value optimized out>) at ypclnt.c:384
#6  yp_match (resp=<value optimized out>, xres=0x4450, req=<value optimized out>, xargs=0x4750, prog=3, 
    domain=<value optimized out>) at ypclnt.c:466
#7  0x00007f1723082058 in _nss_nis_setnetgrent (group=0x7f17265dc5e1 "ims-unix", netgrp=0x7fff1ae34f70)
    at nss_nis/nis-netgrp.c:66
#8  0x00007f1723fd8faf in innetgr (netgroup=<value optimized out>, host=0x7f17265f6080 "gambelmeise", user=0x0, 
    domain=<value optimized out>) at getnetgrent_r.c:366
#9  0x00007f1724ac1773 in client_check (clp=<value optimized out>, hp=0x7f17265f6060) at client.c:380
#10 0x00007f1724ac1aa0 in client_compose (he=0x7f17265f6060) at client.c:266
#11 0x00007f1724abdb35 in auth_authenticate_internal (error=<value optimized out>, hp=0x7f17265f6060, 
    path=<value optimized out>, caller=0x7f17265c5ec4, what=<value optimized out>) at auth.c:129
#12 auth_authenticate (error=<value optimized out>, hp=0x7f17265f6060, path=<value optimized out>, 
    caller=0x7f17265c5ec4, what=<value optimized out>) at auth.c:211
#13 0x00007f1724abd744 in mount_umnt_1_svc (rqstp=<value optimized out>, argp=<value optimized out>, 
    resp=<value optimized out>) at mountd.c:239
#14 0x00007f1724ac6af0 in rpc_dispatch (rqstp=0x7fff1ae37250, transp=0x7f17265c5eb0, dtable=<value optimized out>, 
    nvers=<value optimized out>, argp=0x7fff1ae371a0, resp=0x7fff1ae371b0) at rpcdispatch.c:55
#15 0x00007f1724abd8be in mount_dispatch (rqstp=0x7fff1ae37250, transp=0x7f17265c5eb0) at mount_dispatch.c:84
#16 0x00007f1724266e71 in svc_getreq_common (fd=<value optimized out>) at svc.c:681
#17 0x00007f1724ac0b9e in my_svc_getreqset (readfds=<value optimized out>) at svc_run.c:84
#18 my_svc_run (readfds=<value optimized out>) at svc_run.c:119
#19 0x00007f1724abc958 in main (argc=<value optimized out>, argv=<value optimized out>) at mountd.c:791

I don't know if this helps.
Maybe the problem is not in autofs but in some used library - I don't know.

(In reply to comment #1)
> I'm afraid this isn't enough to go on.  If it is reproducible, then please
> collect the information requested here:
>   http://people.redhat.com/jmoyer

Thanks for the information. I will try to collect more information when it occurs again. But I don't see how I can reproduce it.

(In reply to comment #3)
> (In reply to comment #1)
> > I'm afraid this isn't enough to go on.  If it is reproducible, then please
> > collect the information requested here:
> >   http://people.redhat.com/jmoyer
> 
> Thanks for the information. I will try to collect more information when it
> occurs again. But I don't see how I can reproduce it.    

You might want to review this bug before going too far with
this.

https://bugzilla.redhat.com/show_bug.cgi?id=519430

The backtrace from comment #2 looks like it could be the same
problem that occurs within the glibc function yp_bind_ypbindprog()
described in that bug. There isn't anything that autofs can do
about resolving it, sorry.

I confirm that the patch from bug #519430 seems to solve the problem.
We applied the patch from
https://bugzilla.redhat.com/show_bug.cgi?id=519430#c12
to libtirpc-0.2.0-4 and created a new package.
With this patched libtirpc-0.2.0-4 autofs didn't crash any more.

I mark this as duplicate of bug #519430.

*** This bug has been marked as a duplicate of bug 519430 ***