The Samba-Bugzilla – Attachment 10215 Details for
Bug 10775
smbd crashes when accessing garbage filenames
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
debug 10 log showing a file create crashing
samba-debug-10.log (text/x-log), 14.17 KB, created by
Jonathan Matthew
on 2014-08-22 05:39:23 UTC
(
hide
)
Description:
debug 10 log showing a file create crashing
Filename:
MIME Type:
Creator:
Jonathan Matthew
Created:
2014-08-22 05:39:23 UTC
Size:
14.17 KB
patch
obsolete
>smbd_smb2_create: name[hi\ass1\_GOW8L~E] >smbd_smb2_create_send: open execution phase >unix_convert called on file "hi/ass1/_GOW8L~E" >stat_cache_lookup: lookup failed for name [HI/ASS1/_GOW8L~E] >stat_cache_lookup: lookup failed for name [HI/ASS1] >stat_cache_lookup: lookup failed for name [HI] >unix_convert begin: name = hi/ass1/_GOW8L~E, dirpath = , start = hi/ass1/_GOW8L~E >check_parent_exists: name = hi/ass1/_GOW8L~E, dirpath = hi/ass1, start = _GOW8L~E >is_mangled _GOW8L~E ? >is_mangled_component _GOW8L~E (len 8) ? >is_mangled_component _GOW8L~E (len 8) -> yes >is_mangled _GOW8L~E ? >is_mangled_component _GOW8L~E (len 8) ? >is_mangled_component _GOW8L~E (len 8) -> yes >is_mangled _GOW8L~E ? >is_mangled_component _GOW8L~E (len 8) ? >is_mangled_component _GOW8L~E (len 8) -> yes >lookup_name_from_8_3: _GOW8L~E -> 3C284B82 -> not found >hash2_name_to_8_3: haziq thebox.txt -> 11DFFDA4 -> H4YJQ9~0.TXT (cache=0) >hash2_name_to_8_3: .ass1.c.swp -> 23DFFDD0 -> _9YCF6~8.SWP (cache=0) >convert_string_talloc: Conversion error: Illegal multibyte sequence(�|) >Conversion error: Illegal multibyte sequence(�|) >hash2_name_to_8_3: �| -> 3C284B82 -> _GOW8L~E (cache=0) >conversion finished hi/ass1/_GOW8L~E -> hi/ass1/�| >is_in_path: hi/ass1/�| >is_in_path: match not found >create_file: access_mask = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0, sd = 0x0, fname = hi/ass1/�| >create_file_unixpath: access_mask = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x0, sd = 0x0, fname = hi/ass1/�| >check lock order 1 for /local/samba/locks/smbXsrv_open_global.tdb >lock order: 1:/local/samba/locks/smbXsrv_open_global.tdb 2:<none> 3:<none> >Locking key 0453EC1F >Allocated locked data 0x504d30 >smbXsrv_open_global_store: key '0453EC1F' stored > &global_blob: struct smbXsrv_open_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_open_globalU(case 0) > info0 : * > info0: struct smbXsrv_open_global0 > db_rec : * > server_id: struct server_id > pid : 0x00000000000030ff (12543) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xa5550f7f8bcf20a8 (-6533298643950165848) > open_global_id : 0x0453ec1f (72608799) > open_persistent_id : 0x000000000453ec1f (72608799) > open_volatile_id : 0x000000009cc83f70 (2630369136) > open_owner : S-1-22-1-1420411 > open_time : Fri Aug 22 05:25:36 2014 UTC > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : c5262463-f255-11e3-a1b2-005056c00008 > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 >Unlocking key 0453EC1F >release lock order 1 for /local/samba/locks/smbXsrv_open_global.tdb >lock order: 1:<none> 2:<none> 3:<none> >smbXsrv_open_create: global_id (0x0453ec1f) stored > &open_blob: struct smbXsrv_openB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_openU(case 0) > info0 : * > info0: struct smbXsrv_open > table : * > db_rec : NULL > local_id : 0x9cc83f70 (2630369136) > global : * > global: struct smbXsrv_open_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x00000000000030ff (12543) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xa5550f7f8bcf20a8 (-6533298643950165848) > open_global_id : 0x0453ec1f (72608799) > open_persistent_id : 0x000000000453ec1f (72608799) > open_volatile_id : 0x000000009cc83f70 (2630369136) > open_owner : S-1-22-1-1420411 > open_time : Fri Aug 22 05:25:36 2014 UTC > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : c5262463-f255-11e3-a1b2-005056c00008 > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > status : NT_STATUS_OK > idle_time : Fri Aug 22 05:25:36 2014 UTC > compat : NULL >allocated file structure fnum 2630369136 (1 used) >file_name_hash: /local/samba/groups/stuff/hi/ass1/�| hash 0x5ba6c8bf >unix_mode(hi/ass1/�|) returning 0664 >open_file_ntcreate: fname=hi/ass1/�|, dos_attrs=0x0 access_mask=0x80 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0664 oplock_request=0 private_flags = 0x0 >dos_mode: hi/ass1/�| >dos_mode_from_sbuf returning >dos_mode returning >is_in_path: hi/ass1/�| >convert_string_talloc: Conversion error: Illegal multibyte sequence(�|) >Conversion error: Illegal multibyte sequence(�|) >convert_string_talloc: Conversion error: Illegal multibyte sequence(�|) >Conversion error: Illegal multibyte sequence(�|) >convert_string_talloc: Conversion error: Illegal multibyte sequence(�|) >Conversion error: Illegal multibyte sequence(�|) >convert_string_talloc: Conversion error: Illegal multibyte sequence(�|) >Conversion error: Illegal multibyte sequence(�|) >is_in_path: match not found >open_file_ntcreate: fname=hi/ass1/�|, after mapping access_mask=0x80 >calling open_file with flags=0x0 flags2=0x0 mode=0664, access_mask = 0x80, open_access_mask = 0x80 >posix_get_nt_acl: called for file hi/ass1/�| >uid_to_sid: winbind failed to find a sid for uid 1034 >push_sec_ctx(1420411, 10000) : sec_ctx_stack_ndx = 1 >push_conn_ctx(2302026238) : conn_ctx_stack_ndx = 0 >setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >Security token: (NULL) >UNIX token of user 0 >Primary group is 0 and contains 0 supplementary groups >push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >push_conn_ctx(2302026238) : conn_ctx_stack_ndx = 1 >setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >Security token: (NULL) >UNIX token of user 0 >Primary group is 0 and contains 0 supplementary groups >pdb_getsampwnam (TDB): error fetching database. > Key: USER_xjono >pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >pdb_default_uid_to_sid: Did not find user xjono (1034) >pop_sec_ctx (1420411, 10000) - sec_ctx_stack_ndx = 0 >LEGACY: uid 1034 -> sid S-1-22-1-1034 >gid_to_sid: winbind failed to find a sid for gid 666 >push_sec_ctx(1420411, 10000) : sec_ctx_stack_ndx = 1 >push_conn_ctx(2302026238) : conn_ctx_stack_ndx = 0 >setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >Security token: (NULL) >UNIX token of user 0 >Primary group is 0 and contains 0 supplementary groups >pop_sec_ctx (1420411, 10000) - sec_ctx_stack_ndx = 0 >LEGACY: gid 666 -> sid S-1-22-2-666 >canonicalise_acl: Access ace entries before arrange : >canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- >canon_ace index 1. Type = allow SID = S-1-22-2-666 gid 666 (sysadm) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-- >canon_ace index 2. Type = allow SID = S-1-22-1-1034 uid 1034 (xjono) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rw- >print_canon_ace_list: canonicalise_acl: ace entries after arrange >canon_ace index 0. Type = allow SID = S-1-22-1-1034 uid 1034 (xjono) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rw- >canon_ace index 1. Type = allow SID = S-1-22-2-666 gid 666 (sysadm) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-- >canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- >map_canon_ace_perms: Mapped (UNIX) 180 to (NT) 1f019f >map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 >map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 >smbd_check_access_rights: file hi/ass1/�| requesting 0x80 returning 0x0 (NT_STATUS_OK) >uqjmatt6 opened file hi/ass1/�| read=No write=No (numopen=1) >check lock order 1 for /local/samba/locks/locking.tdb >lock order: 1:/local/samba/locks/locking.tdb 2:<none> 3:<none> >Locking key AD0001005C0000009B59 >Allocated locked data 0x4d6fa0 >check lock order 2 for /local/samba/locks/brlock.tdb >lock order: 1:/local/samba/locks/locking.tdb 2:/local/samba/locks/brlock.tdb 3:<none> >Locking key AD0001005C0000009B59 >Allocated locked data 0x519230 >brl_get_locks_internal: 0 current locks on file_id 5c000100ad:1599b:0 >Unlocking key AD0001005C0000009B59 >release lock order 2 for /local/samba/locks/brlock.tdb >lock order: 1:/local/samba/locks/locking.tdb 2:<none> 3:<none> >grant_fsp_oplock_type: oplock type 0x0 on file hi/ass1/�| >set_file_oplock: granted oplock on file hi/ass1/�|, 5c000100ad:1599b:0/3287855349, tv_sec = 53f6d450, tv_usec = 56276 >unparse_share_modes: > d: struct share_mode_data > servicepath : * > servicepath : '/local/samba/groups/stuff' > base_name : * > base_name : 'hi/ass1/�|' > stream_name : NULL > id: struct file_id > devid : 0x0000005c000100ad (395137056941) > inode : 0x000000000001599b (88475) > extid : 0x0000000000000000 (0) > num_share_modes : 0x00000001 (1) > share_modes: ARRAY(1) > share_modes: struct share_mode_entry > pid: struct server_id > pid : 0x00000000000030ff (12543) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xa5550f7f8bcf20a8 (-6533298643950165848) > op_mid : 0x0000000000000004 (4) > op_type : 0x0000 (0) > access_mask : 0x00000080 (128) > share_access : 0x00000007 (7) > private_options : 0x00000000 (0) > time : Fri Aug 22 05:25:36 2014 UTC.352886 > id: struct file_id > devid : 0x0000005c000100ad (395137056941) > inode : 0x000000000001599b (88475) > extid : 0x0000000000000000 (0) > share_file_id : 0x00000000c3f8b0f5 (3287855349) > uid : 0x0015ac7b (1420411) > flags : 0x0000 (0) > name_hash : 0x5ba6c8bf (1537657023) > stale : 0x00 (0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Thu Aug 21 10:54:17 2014 UTC.0 > changed_write_time : Thu Jan 1 00:00:00 1970 UTC.0 > fresh : 0x01 (1) > modified : 0x01 (1) > record : * >convert_string_internal: Conversion error: Illegal multibyte sequence(hi/ass1/�|) >ndr_push_error(5): Bad character conversion >PANIC (pid 12543): ndr_push_share_mode_lock failed >BACKTRACE: 25 stack frames: > #0 /opt/local/lib/libsmbconf.so.0'log_stack_trace+0x23 [0xfffffd7fe94d6d73] > #1 /opt/local/lib/libsmbconf.so.0'smb_panic_s3+0x21 [0xfffffd7fe94d6e51] > #2 /opt/local/lib/libsamba-util.so.0.0.1'smb_panic+0x31 [0xfffffd7fe9f31c31] > #3 /opt/local/lib/samba/libsmbd_base.so'share_mode_data_destructor+0x2eb [0xfffffd7fe9da87bb] > #4 /opt/local/lib/samba/libtalloc.so.2.0.8'_talloc_free_children_internal.isra.5+0x6aa [0xfffffd7fe9b882da] > #5 /opt/local/lib/samba/libtalloc.so.2.0.8'_talloc_free+0xf5 [0xfffffd7fe9b84d05] > #6 /opt/local/lib/samba/libsmbd_base.so'open_file_ntcreate+0xe1a [0xfffffd7fe9d1c33a] > #7 /opt/local/lib/samba/libsmbd_base.so'create_file_unixpath+0x43e [0xfffffd7fe9d1eeae] > #8 /opt/local/lib/samba/libsmbd_base.so'create_file_default+0x1b1 [0xfffffd7fe9d1ff01] > #9 /opt/local/lib/samba/libsmbd_base.so'vfswrap_create_file+0x63 [0xfffffd7fe9df5753] > #10 /opt/local/lib/samba/libsmbd_base.so'smb_vfs_call_create_file+0x91 [0xfffffd7fe9d266b1] > #11 /opt/local/lib/samba/libsmbd_base.so'smbd_smb2_request_process_create+0xbdb [0xfffffd7fe9d539bb] > #12 /opt/local/lib/samba/libsmbd_base.so'smbd_smb2_request_dispatch+0x94d [0xfffffd7fe9d4b15d] > #13 /opt/local/lib/samba/libsmbd_base.so'smbd_smb2_io_handler+0x87b [0xfffffd7fe9d4c13b] > #14 /opt/local/lib/samba/libsmbd_base.so'smbd_smb2_connection_handler+0x38 [0xfffffd7fe9d4c418] > #15 /opt/local/lib/libsmbconf.so.0'run_events_poll+0x16d [0xfffffd7fe94ec25d] > #16 /opt/local/lib/libsmbconf.so.0's3_event_loop_once+0xeb [0xfffffd7fe94ec4cb] > #17 /opt/local/lib/samba/libtevent.so.0.9.18'_tevent_loop_once+0x9d [0xfffffd7fe9bc662d] > #18 /opt/local/lib/samba/libsmbd_base.so'smbd_process+0xde4 [0xfffffd7fe9d3ba94] > #19 /opt/local/sbin/smbd'smbd_accept_connection+0x269 [0x40ac19] > #20 /opt/local/lib/libsmbconf.so.0'run_events_poll+0x16d [0xfffffd7fe94ec25d] > #21 /opt/local/lib/libsmbconf.so.0's3_event_loop_once+0xeb [0xfffffd7fe94ec4cb] > #22 /opt/local/lib/samba/libtevent.so.0.9.18'_tevent_loop_once+0x9d [0xfffffd7fe9bc662d] > #23 /opt/local/sbin/smbd'main+0x14c1 [0x40c621] > #24 /opt/local/sbin/smbd'_start+0x6c [0x407a1c] >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 10775
: 10215 |
10220
|
10221
|
10237
|
10240
|
10287