685128 – dhcpc6 segfaults on second "service network start"

Bug 685128 - dhcpc6 segfaults on second "service network start"

Summary: dhcpc6 segfaults on second "service network start"

Keywords:
Status:	CLOSED DUPLICATE of bug 515644
Alias:	None
Product:	Red Hat Enterprise Linux 5
Classification:	Red Hat
Component:	dhcpv6
Sub Component:
Version:	5.4
Hardware:	x86_64
OS:	Linux
Priority:	unspecified
Severity:	medium
Target Milestone:	rc
Target Release:	---
Assignee:	Jiri Popelka
QA Contact:	Release Test Team
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2011-03-15 11:33 UTC by Jonathan Barber
Modified:	2011-03-15 15:05 UTC (History)
CC List:	0 users
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:	2011-03-15 13:15:51 UTC
Target Upstream Version:
Dependent Products:

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Jonathan Barber 2011-03-15 11:33:17 UTC

Description of problem:
Configuring an interface to use DHCPv6 and running "service network restart" twice causes dhcp6c to segfault.

Version-Release number of selected component (if applicable):
dhcpv6-client-1.0.10-17.el5

How reproducible:
Always

Steps to Reproduce:
1. Configure /etc/sysconfig/network:
NETWORKING_IPV6=yes
HOSTNAME=foo
NOZEROCONF=yes

2. Configure /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BOOTPROTO=dhcp
ONBOOT=yes
HWADDR=00:50:56:99:01:38
DHCPV6C=yes

3. service network start; service network restart;

Actual results:
# dmesg
dhcp6c[21268]: segfault at 0000000000000010 rip 00002af221218216 rsp 00007fff32b46b00 error 4

Expected results:
Not to segfault.

Additional info:
If the lease file is deleted from /var/lib/dhcpv6/ then dhcp6c doesn't segfault.

Running the process from the console gives the following output:
# dhcpc6 -Df eth0

Mar/15/2011 11:02:54 <3>comment [#] (1)
Mar/15/2011 11:02:54 <3>comment [# See dhcp6c.conf(5) man page for details.] (42)
Mar/15/2011 11:02:54 <3>comment [#] (1)
Mar/15/2011 11:02:54 <3>comment [#interface eth0 {] (17)
Mar/15/2011 11:02:54 <3>comment [#    #information-only;] (23)
Mar/15/2011 11:02:54 <3>comment [#    send rapid-commit;] (23)
Mar/15/2011 11:02:54 <3>comment [#    request prefix-delegation;] (31)
Mar/15/2011 11:02:54 <3>comment [#    #request temp-address;] (27)
Mar/15/2011 11:02:54 <3>comment [#request domain-name-servers;] (29)
Mar/15/2011 11:02:54 <3>comment [#};] (3)
Mar/15/2011 11:02:54 extracted an existing DUID from /var/lib/dhcpv6/dhcp6c_duid: 00:01:00:01:15:12:02:e4:48:1a:bc:21:f2:2a
Mar/15/2011 11:02:54 found an interface eth0 harware 00:50:56:99:01:38
Mar/15/2011 11:02:54 saved generated DUID to /var/lib/dhcpv6/dhcp6c_duid
Mar/15/2011 11:02:54 link local addr is fe80::14
Mar/15/2011 11:02:54 res addr is fe80::14%eth0/28
Mar/15/2011 11:02:54 found an interface eth0 harware 00:50:56:99:01:38
Mar/15/2011 11:02:54  create iaid 939628886 for interface eth0
Mar/15/2011 11:02:54 dhcpv6 doesn't support hardware type 776
Mar/15/2011 11:02:54 doesn't support sit0 address family 0
Mar/15/2011 11:02:54 found an interface eth0 harware 00:50:56:99:01:38
Mar/15/2011 11:02:54  create iaid 939628886 for interface eth0
Mar/15/2011 11:02:54 found an interface eth0 harware 00:50:56:99:01:38
Mar/15/2011 11:02:54  create iaid 939628886 for interface eth0
Mar/15/2011 11:02:54 found an interface eth0 harware 00:50:56:99:01:38
Mar/15/2011 11:02:54  create iaid 939628886 for interface eth0
Mar/15/2011 11:02:54 found an interface eth0 harware 00:50:56:99:01:38
Mar/15/2011 11:02:54  found interface eth0 iaid 939628886
Mar/15/2011 11:02:54 interface eth0 iaid is 939628886
Mar/15/2011 11:02:54 found an interface eth0 harware 00:50:56:99:01:38
Mar/15/2011 11:02:54 saved generated DUID to /var/lib/dhcpv6/dhcp6c_duid
Mar/15/2011 11:02:54 configure duid is 00:01:00:01:15:12:02:e4:48:1a:bc:21:f2:2a
Mar/15/2011 11:02:54 configure duid is 00:01:00:01:15:11:1f:f1:00:50:56:96:19:79
Mar/15/2011 11:02:54 now : 1300186974; offset: 248 
Mar/15/2011 11:02:54 add lease addr fe80::14/64 type 0 to 939628886
Mar/15/2011 11:02:54 hash add client iaidaddr type 0 for  duid 00:01:00:01:15:12:02:e4:48:1a:bc:21:f2:2a for iaid 939628886
Mar/15/2011 11:02:54 add an address fe80::14 on eth0
Mar/15/2011 11:02:54 open_netlink_socket called
Mar/15/2011 11:02:54 netlink_send_rtmsg called
Mar/15/2011 11:02:54 netlink_recv_rtgenmsg called
Mar/15/2011 11:02:54 netlink_send_rtgenmsg called
Mar/15/2011 11:02:54 netlink_recv_rtgenmsg called
Mar/15/2011 11:02:54 get_if_flags called
Mar/15/2011 11:02:54 get_if_flags called
Mar/15/2011 11:02:54 create an event 0x2b5fd2e14a90 xid 0 for state 0
Mar/15/2011 11:02:54 reset a timer on eth0, state=INIT, timeo=0, retrans=859
Mar/15/2011 11:02:55 ifp 0x2b5fd2e0b010 event 0x2b5fd2e14a90 a new XID (3c1dde) is generated
Mar/15/2011 11:02:55 found an interface eth0 harware 00:50:56:99:01:38
Mar/15/2011 11:02:55 saved generated DUID to /var/lib/dhcpv6/dhcp6c_duid
Mar/15/2011 11:02:55 set client ID
Mar/15/2011 11:02:55 set opt_8
Mar/15/2011 11:02:55 set IA_NA iaidinfo: iaid 939628886 renewtime 0 rebindtime 0
Mar/15/2011 11:02:55 set IADDR address option len 24: fe80::14 preferlifetime 0 validlifetime 0
Mar/15/2011 11:02:55 set opt_3
Mar/15/2011 11:02:55 send dst if eth0 addr is ff02::1:2%eth0 scope id is 2
Mar/15/2011 11:02:55 send confirm to ff02::1:2%eth0
Mar/15/2011 11:02:55 DUID is 00:01:00:01:15:12:02:e4:48:1a:bc:21:f2:2a, DUID_LEN is 14
Mar/15/2011 11:02:55 removing ID (ID: 00:01:00:01:15:12:02:e4:48:1a:bc:21:f2:2a)
Mar/15/2011 11:02:55 DUID is , DUID_LEN is 0
Mar/15/2011 11:02:55 reset a timer on eth0, state=CONFIRM, timeo=0, retrans=1012
Mar/15/2011 11:02:55 receive packet info ifname eth0, addr is fe80::14 scope id is 2
Mar/15/2011 11:02:55 receive reply from fe80::250:56ff:fe96:1979%eth0 scope id 2 eth0
Mar/15/2011 11:02:55 get DHCP option client ID, len 14
Mar/15/2011 11:02:55   client DUID: 00:01:00:01:15:12:02:e4:48:1a:bc:21:f2:2a
Mar/15/2011 11:02:55 get DHCP option server ID, len 14
Mar/15/2011 11:02:55   server DUID: 00:01:00:01:15:11:1f:f1:00:50:56:96:19:79
Mar/15/2011 11:02:55 get DHCP option status code, len 30
Mar/15/2011 11:02:55 status code of this message is: 0 - success
Mar/15/2011 11:02:55 status message of this message is:                             
Mar/15/2011 11:02:55 reply message XID is (3c1dde)
Mar/15/2011 11:02:55 ifp 0x2b5fd2e0b010 event 0x2b5fd2e14a90 id is 3c1dde
Mar/15/2011 11:02:55 serverID is 00:01:00:01:15:11:1f:f1:00:50:56:96:19:79 len is 14
Mar/15/2011 11:02:55 new server DUID 00:01:00:01:15:11:1f:f1:00:50:56:96:19:79, len 14 
Mar/15/2011 11:02:55 status code of message: success
Mar/15/2011 11:02:55 no IA option
Mar/15/2011 11:02:55 got an expected reply for confirm
Segmentation fault
# dmesg -c
dhcp6c[22987]: segfault at 0000000000000010 rip 00002b07f3b13216 rsp 00007fff87823a40 error 4

The contents of the lease file /var/lib/dhcpv6/client6.leases939628886: 
lease fe80::14/64 { 
	 DUID: 00:01:00:01:15:12:02:e4:48:1a:bc:21:f2:2a;
	 SDUID: 00:01:00:01:15:11:1f:f1:00:50:56:96:19:79;
	 IAID: 939628886 	 type: 0;
	 RenewTime: 3600;
	 RebindTime: 7200;
	 state: 1;
	 hostname: ;
	 (start_date: 2 2011/3/15 11:3:57 UTC);
	 start date: 1300187037;
	 PreferredLifeTime: 604800;
	 ValidLifeTime: 2592000;
}

With the dhcpv6-debuginfo package and gdb:
Program received signal SIGSEGV, Segmentation fault.
client6_mainloop () at dhcp6c.c:1742
1742				if (ia->type != IAPD && ifp->dad_timer == NULL && 
(gdb) bt
#0  client6_mainloop () at dhcp6c.c:1742
#1  0x00002b4594eb71f0 in main (argc=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>) at dhcp6c.c:314

Comment 1 Jiri Popelka 2011-03-15 13:15:51 UTC

Thank you for the report, however
this problem was already fixed in dhcpv6-1.0.10-18.el5 shipped with RHEL-5.5.

Please update dhcpv6-client to latest version (i.e. dhcpv6-1.0.10-20.el5 shipped with RHEL-5.6) and if the problem still appear feel free to reopen this bug.

*** This bug has been marked as a duplicate of bug 515644 ***

Comment 2 Jiri Popelka 2011-03-15 13:19:26 UTC

Of course I have been meaning
dhcpv6-client-1.0.10-18.el5 and dhcpv6-client-1.0.10-20.el5

Comment 3 Jonathan Barber 2011-03-15 15:05:05 UTC

(In reply to comment #1)
> Thank you for the report, however
> this problem was already fixed in dhcpv6-1.0.10-18.el5 shipped with RHEL-5.5.
> 
> Please update dhcpv6-client to latest version (i.e. dhcpv6-1.0.10-20.el5
> shipped with RHEL-5.6) and if the problem still appear feel free to reopen this
> bug.
> 
> *** This bug has been marked as a duplicate of bug 515644 ***

Not a problem - but I see I'm not authorized to see bug 515644 and it didn't appear when I searched for issues with "dhcpv6-client" or "dhcp6c"...

Note You need to log in before you can comment on or make changes to this bug.