The Samba-Bugzilla – Attachment 16325 Details for
Bug 14568
smbd INTERNAL ERROR: spoolss due to user_ok_token() mismatch
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
backtrace
backtrace.txt (text/plain), 18.23 KB, created by
Bo Kersey
on 2020-11-05 22:45:11 UTC
(
hide
)
Description:
backtrace
Filename:
MIME Type:
Creator:
Bo Kersey
Created:
2020-11-05 22:45:11 UTC
Size:
18.23 KB
patch
obsolete
>#0 0x00007f98a05d00fa in __GI___waitpid (pid=1884, stat_loc=stat_loc@entry=0x7ffead1528f0, options=options@entry=0) at ../sysdeps/unix/sysv/linux/waitpid.c:29 > resultvar = 18446744073709551104 >#1 0x00007f98a0548fcb in do_system (line=line@entry=0x560a29fce110 "/bin/sleep 3000") at ../sysdeps/posix/system.c:148 > __result = <optimized out> > _buffer = {__routine = 0x7f98a05492c0 <cancel_handler>, __arg = 0x7ffead1528cc, __canceltype = 0, __prev = 0x0} > _avail = 1 > status = 704438224 > save = <optimized out> > pid = 1884 > sa = {__sigaction_handler = {sa_handler = 0x1, sa_sigaction = 0x1}, sa_mask = {__val = {65536, 0 <repeats 15 times>}}, sa_flags = 0, sa_restorer = 0x7f98a49fbaf8} > omask = {__val = {7296, 94601658993184, 1, 140293556967972, 140293573688056, 1, 140293573688056, 94601654099920, 94601654099920, 140293556971600, 140293559113744, 94601652456656, 206158430224, 140731802266192, 140731802266000, > 13205737120501637888}} >#2 0x00007f98a05493aa in __libc_system (line=line@entry=0x560a29fce110 "/bin/sleep 3000") at ../sysdeps/posix/system.c:184 >No locals. >#3 0x00007f98a305bd1a in smb_panic_s3 (why=0x7f98a49fbaf8 "internal error") at ../../source3/lib/util.c:843 > lp_sub = <optimized out> > cmd = 0x560a29fce110 "/bin/sleep 3000" > result = <optimized out> > __FUNCTION__ = "smb_panic_s3" >#4 0x00007f98a49aebdb in smb_panic (why=why@entry=0x7f98a49fbaf8 "internal error") at ../../lib/util/fault.c:174 >No locals. >#5 0x00007f98a49aef30 in fault_report (sig=11) at ../../lib/util/fault.c:88 > counter = 1 >#6 sig_fault (sig=11) at ../../lib/util/fault.c:99 >No locals. >#7 <signal handler called> >No locals. >#8 0x00007f98a457947e in token_contains_name (name=0x560a29572430 "@noaccess", token=0x560a2a048bf0, sharename=0x560a29fce040 "ripper", domain=0x0, username=0x560a29fcdfd0 "root", mem_ctx=0x560a29fce0b0) at ../../source3/smbd/share_access.c:82 > domain_len = <optimized out> > prefix = <optimized out> > sid = {sid_rev_num = 112 'p', num_auths = -1 '\377', id_auth = "\377\377\377\377\377\377", sub_auths = {2964366080, 3074700273, 2139820576, 32664, 2721711872, 32664, 704434224, 22026, 707539344, 22026, 2737375904, 32664, 2964366080, 3074700273, > 704438336}} > type = 32766 >#9 token_contains_name_in_list (username=username@entry=0x560a29fcdfd0 "root", domain=<optimized out>, domain@entry=0x0, sharename=0x560a29fce040 "ripper", token=token@entry=0x560a2a048bf0, list=list@entry=0x560a2a478a20) > at ../../source3/smbd/share_access.c:186 > frame = 0x560a29fce0b0 >#10 0x00007f98a457995c in user_ok_token (username=0x560a29fcdfd0 "root", domain=domain@entry=0x0, token=token@entry=0x560a2a048bf0, snum=snum@entry=13) at ../../source3/smbd/share_access.c:217 > lp_sub = 0x7f98a3290aa0 <s3_global_substitution> > __FUNCTION__ = "user_ok_token" >#11 0x00007f98a44e5d2c in _spoolss_OpenPrinterEx (p=p@entry=0x560a29e3c430, r=r@entry=0x560a29fcd090) at ../../source3/rpc_server/spoolss/srv_spoolss_nt.c:1874 > snum = 13 > raddr = <optimized out> > rhost = 0x560a2a2b4600 "ws110.vircio.com" > Printer = 0x560a29f1b120 > result = <optimized out> > rc = <optimized out> > __FUNCTION__ = "_spoolss_OpenPrinterEx" >#12 0x00007f98a464eb77 in api_spoolss_OpenPrinterEx (p=0x560a29e3c430) at ./librpc/gen_ndr/srv_spoolss.c:5453 > call = 0x7f98a19aec68 <spoolss_calls+4968> > pull = 0x560a29fcd140 > push = <optimized out> > ndr_err = <optimized out> > r = 0x560a29fcd090 >#13 0x00007f98a4642cb0 in api_rpcTNP (p=p@entry=0x560a29e3c430, pkt=pkt@entry=0x560a29663370, api_rpc_cmds=0x7f98a4985ce0 <api_spoolss_cmds>, n_cmds=<optimized out>, syntax=syntax@entry=0x560a2a4affb0) at ../../source3/rpc_server/srv_pipe.c:1570 > fn_num = <optimized out> > offset1 = 0 > table = 0x7f98a19ac420 <ndr_table_spoolss> > __FUNCTION__ = "api_rpcTNP" >#14 0x00007f98a4644163 in api_pipe_request (pkt=0x560a29663370, p=0x560a29e3c430) at ../../source3/rpc_server/srv_pipe.c:1497 > frame = 0x560a29fcd030 > ret = false > pipe_fns = 0x560a2a4aff90 > dump_dir = <optimized out> > interface_name = 0x7f98a16e75f6 "spoolss" >#15 process_request_pdu (pkt=0x560a29663370, p=0x560a29e3c430) at ../../source3/rpc_server/srv_pipe.c:1774 > status = <optimized out> > data = <optimized out> > hdr2 = {ptype = DCERPC_PKT_REQUEST, reserved1 = 0 '\000', reserved2 = 0, drep = "\020\000\000", call_id = 2, context_id = 0, opnum = 69} >#16 process_complete_pdu (p=0x560a29e3c430, pkt=0x560a29663370) at ../../source3/rpc_server/srv_pipe.c:1792 > reply = false > __FUNCTION__ = "process_complete_pdu" > __func__ = "process_complete_pdu" >#17 0x00007f98a4513915 in dcerpc_ncacn_packet_process (subreq=<optimized out>) at ../../source3/rpc_server/rpc_server.c:978 > ncacn_conn = 0x560a2a047b40 > out = 0x560a29e3c4d8 > recv_buffer = {data = 0x560a29dcb7d0 "\005", length = 198} > pkt = 0x560a29663370 > to_send = <optimized out> > i = <optimized out> > status = {v = 0} > ok = <optimized out> > __FUNCTION__ = "dcerpc_ncacn_packet_process" > __func__ = "dcerpc_ncacn_packet_process" >#18 0x00007f98a3c1699b in _tevent_req_notify_callback (req=req@entry=0x560a29663140, location=location@entry=0x7f989aebb0f8 "../../librpc/rpc/dcerpc_util.c:944") at ../../lib/tevent/tevent_req.c:141 >No locals. >#19 0x00007f98a3c16a34 in tevent_req_finish (req=req@entry=0x560a29663140, state=state@entry=TEVENT_REQ_DONE, location=location@entry=0x7f989aebb0f8 "../../librpc/rpc/dcerpc_util.c:944") at ../../lib/tevent/tevent_req.c:193 > p = 0x0 >#20 0x00007f98a3c16a50 in _tevent_req_done (req=req@entry=0x560a29663140, location=location@entry=0x7f989aebb0f8 "../../librpc/rpc/dcerpc_util.c:944") at ../../lib/tevent/tevent_req.c:199 >No locals. >#21 0x00007f989aeae5b7 in dcerpc_read_ncacn_packet_done (subreq=<optimized out>) at ../../librpc/rpc/dcerpc_util.c:944 > req = 0x560a29663140 > state = 0x560a296632f0 > ret = 198 > sys_errno = 22026 > status = <optimized out> >#22 0x00007f98a3c1699b in _tevent_req_notify_callback (req=req@entry=0x560a29e5caa0, location=location@entry=0x7f98a2dff918 "../../lib/tsocket/tsocket_helpers.c:245") at ../../lib/tevent/tevent_req.c:141 >No locals. >#23 0x00007f98a3c16a34 in tevent_req_finish (req=req@entry=0x560a29e5caa0, state=state@entry=TEVENT_REQ_DONE, location=location@entry=0x7f98a2dff918 "../../lib/tsocket/tsocket_helpers.c:245") at ../../lib/tevent/tevent_req.c:193 > p = 0x0 >#24 0x00007f98a3c16a50 in _tevent_req_done (req=req@entry=0x560a29e5caa0, location=location@entry=0x7f98a2dff918 "../../lib/tsocket/tsocket_helpers.c:245") at ../../lib/tevent/tevent_req.c:199 >No locals. >#25 0x00007f98a2df63c3 in tstream_readv_pdu_ask_for_next_vector (req=req@entry=0x560a29e5caa0) at ../../lib/tsocket/tsocket_helpers.c:245 > state = 0x560a29e5cc50 > ret = <optimized out> > to_read = 0 > i = <optimized out> > subreq = <optimized out> > optimize = true > save_optimize = false >#26 0x00007f98a2df654e in tstream_readv_pdu_readv_done (subreq=0x560a2a220480) at ../../lib/tsocket/tsocket_helpers.c:319 > req = 0x560a29e5caa0 > state = 0x560a29e5cc50 > ret = <optimized out> > sys_errno = 32664 >#27 0x00007f98a3c1699b in _tevent_req_notify_callback (req=req@entry=0x560a2a220480, location=location@entry=0x7f98a2dff0d0 "../../lib/tsocket/tsocket.c:604") at ../../lib/tevent/tevent_req.c:141 >No locals. >#28 0x00007f98a3c16a34 in tevent_req_finish (req=req@entry=0x560a2a220480, state=state@entry=TEVENT_REQ_DONE, location=location@entry=0x7f98a2dff0d0 "../../lib/tsocket/tsocket.c:604") at ../../lib/tevent/tevent_req.c:193 > p = 0x0 >#29 0x00007f98a3c16a50 in _tevent_req_done (req=req@entry=0x560a2a220480, location=location@entry=0x7f98a2dff0d0 "../../lib/tsocket/tsocket.c:604") at ../../lib/tevent/tevent_req.c:199 >No locals. >#30 0x00007f98a2df544a in tstream_readv_done (subreq=<optimized out>) at ../../lib/tsocket/tsocket.c:604 > req = 0x560a2a220480 > state = 0x560a2a220630 > ret = 182 > sys_errno = 0 >#31 0x00007f98a3c1699b in _tevent_req_notify_callback (req=req@entry=0x560a2a4d54c0, location=location@entry=0x7f989dff2978 "../../libcli/named_pipe_auth/npa_tstream.c:522") at ../../lib/tevent/tevent_req.c:141 >No locals. >#32 0x00007f98a3c16a34 in tevent_req_finish (req=0x560a2a4d54c0, state=TEVENT_REQ_DONE, location=0x7f989dff2978 "../../libcli/named_pipe_auth/npa_tstream.c:522") at ../../lib/tevent/tevent_req.c:193 > p = 0x0 >#33 0x00007f98a3c16adf in tevent_req_trigger (ev=ev@entry=0x560a2941c470, im=im@entry=0x560a2a4d55b0, private_data=private_data@entry=0x560a2a4d54c0) at ../../lib/tevent/tevent_req.c:250 > req = <optimized out> >#34 0x00007f98a3c1620c in tevent_common_invoke_immediate_handler (im=0x560a2a4d55b0, removed=removed@entry=0x0) at ../../lib/tevent/tevent_immediate.c:166 > handler_ev = 0x560a2941c470 > ev = 0x560a2941c470 > cur = {prev = <optimized out>, next = <optimized out>, event_ctx = <optimized out>, wrapper = 0x0, busy = <optimized out>, destroyed = <optimized out>, handler = <optimized out>, private_data = <optimized out>, handler_name = <optimized out>, > create_location = <optimized out>, schedule_location = <optimized out>, cancel_fn = <optimized out>, additional_data = <optimized out>} >#35 0x00007f98a3c16241 in tevent_common_loop_immediate (ev=ev@entry=0x560a2941c470) at ../../lib/tevent/tevent_immediate.c:203 > im = <optimized out> > ret = <optimized out> >#36 0x00007f98a3c1bfd2 in epoll_event_loop_once (ev=0x560a2941c470, location=<optimized out>) at ../../lib/tevent/tevent_epoll.c:918 > epoll_ev = 0x560a2942d680 > tval = {tv_sec = 94601641672192, tv_usec = 140293573398866} > panic_triggered = false >#37 0x00007f98a3c19f4a in std_event_loop_once (ev=0x560a2941c470, location=0x7f98a4704c38 "../../source3/smbd/process.c:4170") at ../../lib/tevent/tevent_standard.c:110 > glue_ptr = <optimized out> > glue = 0x560a2941c5b0 > ret = <optimized out> >#38 0x00007f98a3c15622 in _tevent_loop_once (ev=ev@entry=0x560a2941c470, location=location@entry=0x7f98a4704c38 "../../source3/smbd/process.c:4170") at ../../lib/tevent/tevent.c:772 > ret = <optimized out> > nesting_stack_ptr = 0x0 >#39 0x00007f98a3c15810 in tevent_common_loop_wait (ev=0x560a2941c470, location=0x7f98a4704c38 "../../source3/smbd/process.c:4170") at ../../lib/tevent/tevent.c:895 > ret = <optimized out> >#40 0x00007f98a3c19efa in std_event_loop_wait (ev=0x560a2941c470, location=0x7f98a4704c38 "../../source3/smbd/process.c:4170") at ../../lib/tevent/tevent_standard.c:141 > glue_ptr = <optimized out> > glue = 0x560a2941c5b0 > ret = <optimized out> >#41 0x00007f98a3c15878 in _tevent_loop_wait (ev=ev@entry=0x560a2941c470, location=location@entry=0x7f98a4704c38 "../../source3/smbd/process.c:4170") at ../../lib/tevent/tevent.c:914 >No locals. >#42 0x00007f98a45f766a in smbd_process (ev_ctx=0x560a2941c470, msg_ctx=<optimized out>, sock_fd=48, interactive=<optimized out>) at ../../source3/smbd/process.c:4170 > trace_state = {ev = 0x560a2941c470, frame = 0x560a29fccfd0, profile_idle = {start = 0, stats = 0x0}} > lp_sub = 0x7f98a3290aa0 <s3_global_substitution> > client = 0x560a29c30090 > sconn = 0x560a29d4f710 > xconn = 0x560a29e24db0 > locaddr = 0x560a29cb25a0 "winbindd" > remaddr = <optimized out> > ret = <optimized out> > status = <optimized out> > tv = {tv_sec = 1604615156, tv_usec = 811678} > now = <optimized out> > chroot_dir = <optimized out> > rc = <optimized out> > __func__ = "smbd_process" > __FUNCTION__ = "smbd_process" >#43 0x0000560a27bc6042 in smbd_accept_connection (ev=0x560a2941c470, fde=<optimized out>, flags=<optimized out>, private_data=<optimized out>) at ../../source3/smbd/server.c:1012 > status = {v = 0} > s = 0x0 > msg_ctx = 0x560a2942a460 > addr = {ss_family = 2, __ss_align = 0, > __ss_padding = "@\226\005*\nV\000\000\340\225\005*\nV\000\000H\332\301\243\230\177\000\000P9\025\255\376\177\000\000z-\032\255\376\177", '\000' <repeats 14 times>, "\001\000\000\000\220.,*\nV\000\000p\304A)\nV\000\000`OC)\nV\000\000\270.,*\nV\000\000\351\243\301\243\230\177\000\000\361{\244_\000\000\000\000\"\244\301\243\230\177\000"} > in_addrlen = 16 > fd = 48 > pid = 0 > __FUNCTION__ = "smbd_accept_connection" >#44 0x00007f98a3c15dfc in tevent_common_invoke_fd_handler (fde=fde@entry=0x560a29a31410, flags=<optimized out>, removed=removed@entry=0x0) at ../../lib/tevent/tevent_fd.c:138 > handler_ev = 0x560a2941c470 >#45 0x00007f98a3c1c283 in epoll_event_loop (tvalp=0x7ffead1539f0, epoll_ev=0x560a2942a000) at ../../lib/tevent/tevent_epoll.c:736 > fde = 0x560a29a31410 > flags = <optimized out> > mpx_fde = <optimized out> > ret = <optimized out> > i = 0 > timeout = <optimized out> > wait_errno = 0 > events = {{events = 1, data = {ptr = 0x560a29a31410, fd = 698553360, u32 = 698553360, u64 = 94601648215056}}} >#46 epoll_event_loop_once (ev=<optimized out>, location=<optimized out>) at ../../lib/tevent/tevent_epoll.c:937 > epoll_ev = 0x560a2942a000 > tval = {tv_sec = 898, tv_usec = 945611} > panic_triggered = false >#47 0x00007f98a3c19f4a in std_event_loop_once (ev=0x560a2941c470, location=0x560a27bcdcb0 "../../source3/smbd/server.c:1359") at ../../lib/tevent/tevent_standard.c:110 > glue_ptr = <optimized out> > glue = 0x560a2941c5b0 > ret = <optimized out> >#48 0x00007f98a3c15622 in _tevent_loop_once (ev=ev@entry=0x560a2941c470, location=location@entry=0x560a27bcdcb0 "../../source3/smbd/server.c:1359") at ../../lib/tevent/tevent.c:772 > ret = <optimized out> > nesting_stack_ptr = 0x0 >#49 0x00007f98a3c15810 in tevent_common_loop_wait (ev=0x560a2941c470, location=0x560a27bcdcb0 "../../source3/smbd/server.c:1359") at ../../lib/tevent/tevent.c:895 > ret = <optimized out> >#50 0x00007f98a3c19efa in std_event_loop_wait (ev=0x560a2941c470, location=0x560a27bcdcb0 "../../source3/smbd/server.c:1359") at ../../lib/tevent/tevent_standard.c:141 > glue_ptr = <optimized out> > glue = 0x560a2941c5b0 > ret = <optimized out> >#51 0x00007f98a3c15878 in _tevent_loop_wait (ev=<optimized out>, location=<optimized out>) at ../../lib/tevent/tevent.c:914 >No locals. >#52 0x0000560a27bc7e64 in smbd_parent_loop (parent=0x560a29434f60, ev_ctx=0x560a2941c470) at ../../source3/smbd/server.c:1359 > trace_state = {frame = 0x560a2941b320} > ret = 0 >#53 main (argc=<optimized out>, argv=<optimized out>) at ../../source3/smbd/server.c:2197 > is_daemon = <optimized out> > interactive = <optimized out> > Fork = false > no_process_group = <optimized out> > log_stdout = <optimized out> > ports = 0x0 > profile_level = 0x0 > opt = <optimized out> > pc = <optimized out> > print_build_options = <optimized out> > main_server_id = {pid = 1494, task_id = 0, vnn = 4294967295, unique_id = 9541932780073648656} > long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7f98a1bc9160 <poptHelpOptions>, val = 0, descrip = 0x560a27bce1d3 "Help options:", argDescrip = 0x0}, {longName = 0x560a27bce1e1 "daemon", shortName = 68 'D', > argInfo = 0, arg = 0x0, val = 1000, descrip = 0x560a27bce1e8 "Become a daemon (default)", argDescrip = 0x0}, {longName = 0x560a27bce202 "interactive", shortName = 105 'i', argInfo = 0, arg = 0x0, val = 1001, > descrip = 0x560a27bccfe0 "Run interactive (not a daemon) and log to stdout", argDescrip = 0x0}, {longName = 0x560a27bce20e "foreground", shortName = 70 'F', argInfo = 0, arg = 0x0, val = 1002, > descrip = 0x560a27bcd018 "Run daemon in foreground (for daemontools, etc.)", argDescrip = 0x0}, {longName = 0x560a27bce219 "no-process-group", shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 1003, > descrip = 0x560a27bcd050 "Don't create a new process group", argDescrip = 0x0}, {longName = 0x560a27bce22a "log-stdout", shortName = 83 'S', argInfo = 0, arg = 0x0, val = 1004, descrip = 0x560a27bce235 "Log to stdout", argDescrip = 0x0}, { > longName = 0x560a27bce243 "build-options", shortName = 98 'b', argInfo = 0, arg = 0x0, val = 98, descrip = 0x560a27bce251 "Print build options", argDescrip = 0x0}, {longName = 0x560a27bce265 "port", shortName = 112 'p', argInfo = 1, > arg = 0x7ffead153b48, val = 0, descrip = 0x560a27bce26a "Listen on the specified ports", argDescrip = 0x0}, {longName = 0x560a27bce288 "profiling-level", shortName = 80 'P', argInfo = 1, arg = 0x7ffead153b50, val = 0, > descrip = 0x560a27bce298 "Set profiling level", argDescrip = 0x560a27bce2ac "PROFILE_LEVEL"}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7f98a44292a0 <popt_common_samba>, val = 0, > descrip = 0x560a27bce2ba "Common samba options:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, argDescrip = 0x0}} > parent = 0x560a29434f60 > frame = <optimized out> > status = <optimized out> > ev_ctx = 0x560a2941c470 > msg_ctx = 0x560a2942a460 > server_id = {pid = 1494, task_id = 0, vnn = 4294967295, unique_id = 6391887839256801638} > se = <optimized out> > profiling_level = <optimized out> > np_dir = <optimized out> > lp_sub = <optimized out> > smbd_shim_fns = {send_stat_cache_delete_message = 0x7f98a45e5b3d <smbd_send_stat_cache_delete_message>, change_to_root_user = 0x7f98a45cacb6 <smbd_change_to_root_user>, > become_authenticated_pipe_user = 0x7f98a45cad44 <smbd_become_authenticated_pipe_user>, unbecome_authenticated_pipe_user = 0x7f98a45cadf1 <smbd_unbecome_authenticated_pipe_user>, > contend_level2_oplocks_begin = 0x7f98a463630f <smbd_contend_level2_oplocks_begin>, contend_level2_oplocks_end = 0x7f98a4636649 <smbd_contend_level2_oplocks_end>, become_root = 0x7f98a45cadff <smbd_become_root>, > unbecome_root = 0x7f98a45cae27 <smbd_unbecome_root>, exit_server = 0x7f98a462d131 <smbd_exit_server>, exit_server_cleanly = 0x7f98a462d142 <smbd_exit_server_cleanly>} > __FUNCTION__ = "main" > __func__ = "main"
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 14568
: 16325 |
16326
|
16327
|
16328
|
16331