Attachment 6591 Details for Bug 8240 – The valgrind output

The valgrind output

metze.vg-smbd.txt (text/plain), 27.71 KB, created by Stefan Metzmacher on 2011-06-16 16:45:54 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Stefan Metzmacher

Created: 2011-06-16 16:45:54 UTC

Size: 27.71 KB

patch

obsolete

>==11270== Memcheck, a memory error detector
>==11270== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
>==11270== Using Valgrind-3.6.0.SVN-Debian and LibVEX; rerun with -h for copyright info
>==11270== Command: ./bin/smbd -F --no-process-group --log-stdout -s /home/metze/master3/st/s3dc/lib/server.conf -d10
>==11270== Parent PID: 11244
>==11270== 
>==11270== Conditional jump or move depends on uninitialised value(s)
>==11270==    at 0xBB86CC8: ndr_print_winreg_Type (ndr_misc.c:203)
>==11270==    by 0x9FAD0D4: ndr_print_winreg_QueryValue (ndr_winreg.c:2794)
>==11270==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11270==    by 0x570C6A7: api_winreg_QueryValue (srv_winreg.c:1397)
>==11270==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11270==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11270==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11270==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11270==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11270==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11270==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11270==    by 0x5C392A8: dcerpc_winreg_query_multi_sz (cli_winreg.c:191)
>==11270==    by 0x5C39EDA: dcerpc_winreg_add_multi_sz (cli_winreg.c:608)
>==11270==    by 0x55019AC: eventlog_init_winreg (srv_eventlog_reg.c:194)
>==11270==    by 0x55355F9: eventlog_init_cb (rpc_ep_setup.c:777)
>==11270==    by 0x5C4CA7F: rpc_srv_register (srv_pipe_register.c:219)
>==11270==    by 0x5506521: rpc_eventlog_init (srv_eventlog.c:1951)
>==11270==    by 0x553611A: dcesrv_ep_setup (rpc_ep_setup.c:1134)
>==11270==    by 0x4089EB: main (server.c:1206)
>==11270==  Uninitialised value was created by a stack allocation
>==11270==    at 0x5C37E98: ??? (in /home/metze/master3/bin/default/source3/librpc_client.so)
>==11270== 
>==11270== Use of uninitialised value of size 8
>==11270==    at 0x7674E4B: _itoa_word (_itoa.c:195)
>==11270==    by 0x7676138: vfprintf (vfprintf.c:1613)
>==11270==    by 0x769C379: vasprintf (vasprintf.c:64)
>==11270==    by 0xBB82E54: ndr_print_debug_helper (ndr.c:178)
>==11270==    by 0xBB80B25: ndr_print_enum (ndr_basic.c:977)
>==11270==    by 0xBB86DB9: ndr_print_winreg_Type (ndr_misc.c:217)
>==11270==    by 0x9FAD0D4: ndr_print_winreg_QueryValue (ndr_winreg.c:2794)
>==11270==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11270==    by 0x570C6A7: api_winreg_QueryValue (srv_winreg.c:1397)
>==11270==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11270==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11270==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11270==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11270==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11270==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11270==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11270==    by 0x5C392A8: dcerpc_winreg_query_multi_sz (cli_winreg.c:191)
>==11270==    by 0x5C39EDA: dcerpc_winreg_add_multi_sz (cli_winreg.c:608)
>==11270==    by 0x55019AC: eventlog_init_winreg (srv_eventlog_reg.c:194)
>==11270==    by 0x55355F9: eventlog_init_cb (rpc_ep_setup.c:777)
>==11270==    by 0x5C4CA7F: rpc_srv_register (srv_pipe_register.c:219)
>==11270==    by 0x5506521: rpc_eventlog_init (srv_eventlog.c:1951)
>==11270==    by 0x553611A: dcesrv_ep_setup (rpc_ep_setup.c:1134)
>==11270==    by 0x4089EB: main (server.c:1206)
>==11270==  Uninitialised value was created by a stack allocation
>==11270==    at 0x5C37E98: ??? (in /home/metze/master3/bin/default/source3/librpc_client.so)
>==11270== 
>==11270== Conditional jump or move depends on uninitialised value(s)
>==11270==    at 0x7674E55: _itoa_word (_itoa.c:195)
>==11270==    by 0x7676138: vfprintf (vfprintf.c:1613)
>==11270==    by 0x769C379: vasprintf (vasprintf.c:64)
>==11270==    by 0xBB82E54: ndr_print_debug_helper (ndr.c:178)
>==11270==    by 0xBB80B25: ndr_print_enum (ndr_basic.c:977)
>==11270==    by 0xBB86DB9: ndr_print_winreg_Type (ndr_misc.c:217)
>==11270==    by 0x9FAD0D4: ndr_print_winreg_QueryValue (ndr_winreg.c:2794)
>==11270==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11270==    by 0x570C6A7: api_winreg_QueryValue (srv_winreg.c:1397)
>==11270==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11270==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11270==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11270==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11270==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11270==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11270==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11270==    by 0x5C392A8: dcerpc_winreg_query_multi_sz (cli_winreg.c:191)
>==11270==    by 0x5C39EDA: dcerpc_winreg_add_multi_sz (cli_winreg.c:608)
>==11270==    by 0x55019AC: eventlog_init_winreg (srv_eventlog_reg.c:194)
>==11270==    by 0x55355F9: eventlog_init_cb (rpc_ep_setup.c:777)
>==11270==    by 0x5C4CA7F: rpc_srv_register (srv_pipe_register.c:219)
>==11270==    by 0x5506521: rpc_eventlog_init (srv_eventlog.c:1951)
>==11270==    by 0x553611A: dcesrv_ep_setup (rpc_ep_setup.c:1134)
>==11270==    by 0x4089EB: main (server.c:1206)
>==11270==  Uninitialised value was created by a stack allocation
>==11270==    at 0x5C37E98: ??? (in /home/metze/master3/bin/default/source3/librpc_client.so)
>==11270== 
>==11270== Conditional jump or move depends on uninitialised value(s)
>==11270==    at 0x7677FB1: vfprintf (vfprintf.c:1613)
>==11270==    by 0x769C379: vasprintf (vasprintf.c:64)
>==11270==    by 0xBB82E54: ndr_print_debug_helper (ndr.c:178)
>==11270==    by 0xBB80B25: ndr_print_enum (ndr_basic.c:977)
>==11270==    by 0xBB86DB9: ndr_print_winreg_Type (ndr_misc.c:217)
>==11270==    by 0x9FAD0D4: ndr_print_winreg_QueryValue (ndr_winreg.c:2794)
>==11270==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11270==    by 0x570C6A7: api_winreg_QueryValue (srv_winreg.c:1397)
>==11270==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11270==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11270==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11270==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11270==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11270==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11270==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11270==    by 0x5C392A8: dcerpc_winreg_query_multi_sz (cli_winreg.c:191)
>==11270==    by 0x5C39EDA: dcerpc_winreg_add_multi_sz (cli_winreg.c:608)
>==11270==    by 0x55019AC: eventlog_init_winreg (srv_eventlog_reg.c:194)
>==11270==    by 0x55355F9: eventlog_init_cb (rpc_ep_setup.c:777)
>==11270==    by 0x5C4CA7F: rpc_srv_register (srv_pipe_register.c:219)
>==11270==    by 0x5506521: rpc_eventlog_init (srv_eventlog.c:1951)
>==11270==    by 0x553611A: dcesrv_ep_setup (rpc_ep_setup.c:1134)
>==11270==    by 0x4089EB: main (server.c:1206)
>==11270==  Uninitialised value was created by a stack allocation
>==11270==    at 0x5C37E98: ??? (in /home/metze/master3/bin/default/source3/librpc_client.so)
>==11270== 
>==11270== Conditional jump or move depends on uninitialised value(s)
>==11270==    at 0x7676226: vfprintf (vfprintf.c:1613)
>==11270==    by 0x769C379: vasprintf (vasprintf.c:64)
>==11270==    by 0xBB82E54: ndr_print_debug_helper (ndr.c:178)
>==11270==    by 0xBB80B25: ndr_print_enum (ndr_basic.c:977)
>==11270==    by 0xBB86DB9: ndr_print_winreg_Type (ndr_misc.c:217)
>==11270==    by 0x9FAD0D4: ndr_print_winreg_QueryValue (ndr_winreg.c:2794)
>==11270==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11270==    by 0x570C6A7: api_winreg_QueryValue (srv_winreg.c:1397)
>==11270==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11270==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11270==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11270==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11270==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11270==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11270==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11270==    by 0x5C392A8: dcerpc_winreg_query_multi_sz (cli_winreg.c:191)
>==11270==    by 0x5C39EDA: dcerpc_winreg_add_multi_sz (cli_winreg.c:608)
>==11270==    by 0x55019AC: eventlog_init_winreg (srv_eventlog_reg.c:194)
>==11270==    by 0x55355F9: eventlog_init_cb (rpc_ep_setup.c:777)
>==11270==    by 0x5C4CA7F: rpc_srv_register (srv_pipe_register.c:219)
>==11270==    by 0x5506521: rpc_eventlog_init (srv_eventlog.c:1951)
>==11270==    by 0x553611A: dcesrv_ep_setup (rpc_ep_setup.c:1134)
>==11270==    by 0x4089EB: main (server.c:1206)
>==11270==  Uninitialised value was created by a stack allocation
>==11270==    at 0x5C37E98: ??? (in /home/metze/master3/bin/default/source3/librpc_client.so)
>==11270== 
>==11270== Conditional jump or move depends on uninitialised value(s)
>==11270==    at 0xBB86CC8: ndr_print_winreg_Type (ndr_misc.c:203)
>==11270==    by 0x9FAD2E9: ndr_print_winreg_QueryValue (ndr_winreg.c:2824)
>==11270==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11270==    by 0x570C777: api_winreg_QueryValue (srv_winreg.c:1414)
>==11270==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11270==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11270==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11270==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11270==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11270==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11270==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11270==    by 0x5C392A8: dcerpc_winreg_query_multi_sz (cli_winreg.c:191)
>==11270==    by 0x5C39EDA: dcerpc_winreg_add_multi_sz (cli_winreg.c:608)
>==11270==    by 0x55019AC: eventlog_init_winreg (srv_eventlog_reg.c:194)
>==11270==    by 0x55355F9: eventlog_init_cb (rpc_ep_setup.c:777)
>==11270==    by 0x5C4CA7F: rpc_srv_register (srv_pipe_register.c:219)
>==11270==    by 0x5506521: rpc_eventlog_init (srv_eventlog.c:1951)
>==11270==    by 0x553611A: dcesrv_ep_setup (rpc_ep_setup.c:1134)
>==11270==    by 0x4089EB: main (server.c:1206)
>==11270==  Uninitialised value was created by a stack allocation
>==11270==    at 0x5C37E98: ??? (in /home/metze/master3/bin/default/source3/librpc_client.so)
>==11270== 
>==11370== 
>==11370== HEAP SUMMARY:
>==11370==     in use at exit: 119,432 bytes in 1,038 blocks
>==11370==   total heap usage: 204,141 allocs, 203,103 frees, 15,829,484 bytes allocated
>==11370== 
>==11370== LEAK SUMMARY:
>==11370==    definitely lost: 61 bytes in 4 blocks
>==11370==    indirectly lost: 641 bytes in 23 blocks
>==11370==      possibly lost: 80,292 bytes in 566 blocks
>==11370==    still reachable: 38,438 bytes in 445 blocks
>==11370==         suppressed: 0 bytes in 0 blocks
>==11370== Rerun with --leak-check=full to see details of leaked memory
>==11370== 
>==11370== For counts of detected and suppressed errors, rerun with: -v
>==11370== ERROR SUMMARY: 18 errors from 6 contexts (suppressed: 12 from 6)
>==11392== 
>==11392== HEAP SUMMARY:
>==11392==     in use at exit: 119,425 bytes in 1,040 blocks
>==11392==   total heap usage: 193,672 allocs, 192,632 frees, 15,282,992 bytes allocated
>==11392== 
>==11392== LEAK SUMMARY:
>==11392==    definitely lost: 78 bytes in 6 blocks
>==11392==    indirectly lost: 641 bytes in 23 blocks
>==11392==      possibly lost: 80,272 bytes in 566 blocks
>==11392==    still reachable: 38,434 bytes in 445 blocks
>==11392==         suppressed: 0 bytes in 0 blocks
>==11392== Rerun with --leak-check=full to see details of leaked memory
>==11392== 
>==11392== For counts of detected and suppressed errors, rerun with: -v
>==11392== ERROR SUMMARY: 18 errors from 6 contexts (suppressed: 12 from 6)
>==11411== 
>==11411== HEAP SUMMARY:
>==11411==     in use at exit: 119,484 bytes in 1,043 blocks
>==11411==   total heap usage: 209,744 allocs, 208,701 frees, 16,186,865 bytes allocated
>==11411== 
>==11411== LEAK SUMMARY:
>==11411==    definitely lost: 97 bytes in 8 blocks
>==11411==    indirectly lost: 641 bytes in 23 blocks
>==11411==      possibly lost: 80,288 bytes in 566 blocks
>==11411==    still reachable: 38,458 bytes in 446 blocks
>==11411==         suppressed: 0 bytes in 0 blocks
>==11411== Rerun with --leak-check=full to see details of leaked memory
>==11411== 
>==11411== For counts of detected and suppressed errors, rerun with: -v
>==11411== ERROR SUMMARY: 18 errors from 6 contexts (suppressed: 12 from 6)
>==11344== Syscall param capget(data) points to unaddressable byte(s)
>==11344==    at 0x7716B87: capget (syscall-template.S:82)
>==11344==    by 0xEEE97E2: cap_init (in /lib/libcap.so.2.17)
>==11344==    by 0xEEE99D5: cap_get_proc (in /lib/libcap.so.2.17)
>==11344==    by 0x6F923F6: set_process_capability (system.c:1035)
>==11344==    by 0x6F92644: drop_effective_capability (system.c:1107)
>==11344==    by 0x6F96E84: smbrun_internal (smbrun.c:76)
>==11344==    by 0x6F97258: smbrun_no_sanitize (smbrun.c:212)
>==11344==    by 0x554AE92: print_run_command (print_generic.c:88)
>==11344==    by 0x554B585: generic_queue_get (print_generic.c:234)
>==11344==    by 0x551A6A6: print_queue_update_internal (printing.c:1356)
>==11344==    by 0x551B0B2: print_queue_update_with_lock (printing.c:1556)
>==11344==    by 0x551B2A1: print_queue_receive (printing.c:1592)
>==11344==    by 0x6F84B27: messaging_dispatch_rec (messages.c:376)
>==11344==    by 0x6F86089: message_dispatch (messages_local.c:478)
>==11344==    by 0x6F84E6F: messaging_tdb_signal_handler (messages_local.c:76)
>==11344==    by 0x66B26F0: tevent_common_check_signal (tevent_signal.c:364)
>==11344==    by 0x6FACEA3: run_events_poll (events.c:193)
>==11344==    by 0x6FAD812: s3_event_loop_once (events.c:345)
>==11344==    by 0x66AED76: _tevent_loop_once (tevent.c:494)
>==11344==    by 0x66AEFB3: tevent_common_loop_wait (tevent.c:595)
>==11344==    by 0x66AF07E: _tevent_loop_wait (tevent.c:614)
>==11344==    by 0x551B875: start_background_queue (printing.c:1704)
>==11344==    by 0x408A65: main (server.c:1221)
>==11344==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
>==11344== 
>==11429== Use of uninitialised value of size 8
>==11429==    at 0xBB86CE0: ndr_print_winreg_Type (ndr_misc.c:203)
>==11429==    by 0x9FAD0D4: ndr_print_winreg_QueryValue (ndr_winreg.c:2794)
>==11429==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11429==    by 0x570C6A7: api_winreg_QueryValue (srv_winreg.c:1397)
>==11429==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11429==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11429==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11429==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11429==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11429==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11429==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11429==    by 0x5C390D4: dcerpc_winreg_query_binary (cli_winreg.c:120)
>==11429==    by 0x56DB778: winreg_get_printer (srv_spoolss_util.c:1866)
>==11429==    by 0x56B521F: _spoolss_GetPrinter (srv_spoolss_nt.c:4735)
>==11429==    by 0x56C58EE: api_spoolss_GetPrinter (srv_spoolss.c:707)
>==11429==    by 0x56A93AB: api_rpcTNP (srv_pipe.c:1618)
>==11429==    by 0x56A8F7E: api_pipe_request (srv_pipe.c:1550)
>==11429==    by 0x56A9C95: process_request_pdu (srv_pipe.c:1808)
>==11429==    by 0x56A9FAF: process_complete_pdu (srv_pipe.c:1864)
>==11429==    by 0x56A3913: process_incoming_data (srv_pipe_hnd.c:218)
>==11429==    by 0x56A3A18: write_to_internal_pipe (srv_pipe_hnd.c:244)
>==11429==    by 0x56A4378: np_write_send (srv_pipe_hnd.c:538)
>==11429==    by 0x5563B29: api_dcerpc_cmd (ipc.c:271)
>==11429==    by 0x5564781: api_fd_reply (ipc.c:482)
>==11429==    by 0x5564A2D: named_pipe (ipc.c:537)
>==11429==    by 0x5564D6C: handle_trans (ipc.c:594)
>==11429==    by 0x5565A4E: reply_trans (ipc.c:779)
>==11429==    by 0x55F46BB: switch_message (process.c:1573)
>==11429==    by 0x55F4845: construct_reply (process.c:1609)
>==11429==    by 0x55F4B8B: process_smb (process.c:1687)
>==11429==  Uninitialised value was created by a stack allocation
>==11429==    at 0x54E8500: ??? (in /home/metze/master3/bin/default/source3/libsmbd_base.so)
>==11429== 
>==11429== Use of uninitialised value of size 8
>==11429==    at 0xBB86CE0: ndr_print_winreg_Type (ndr_misc.c:203)
>==11429==    by 0x9FAD2E9: ndr_print_winreg_QueryValue (ndr_winreg.c:2824)
>==11429==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11429==    by 0x570C777: api_winreg_QueryValue (srv_winreg.c:1414)
>==11429==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11429==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11429==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11429==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11429==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11429==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11429==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11429==    by 0x5C390D4: dcerpc_winreg_query_binary (cli_winreg.c:120)
>==11429==    by 0x56DB778: winreg_get_printer (srv_spoolss_util.c:1866)
>==11429==    by 0x56B521F: _spoolss_GetPrinter (srv_spoolss_nt.c:4735)
>==11429==    by 0x56C58EE: api_spoolss_GetPrinter (srv_spoolss.c:707)
>==11429==    by 0x56A93AB: api_rpcTNP (srv_pipe.c:1618)
>==11429==    by 0x56A8F7E: api_pipe_request (srv_pipe.c:1550)
>==11429==    by 0x56A9C95: process_request_pdu (srv_pipe.c:1808)
>==11429==    by 0x56A9FAF: process_complete_pdu (srv_pipe.c:1864)
>==11429==    by 0x56A3913: process_incoming_data (srv_pipe_hnd.c:218)
>==11429==    by 0x56A3A18: write_to_internal_pipe (srv_pipe_hnd.c:244)
>==11429==    by 0x56A4378: np_write_send (srv_pipe_hnd.c:538)
>==11429==    by 0x5563B29: api_dcerpc_cmd (ipc.c:271)
>==11429==    by 0x5564781: api_fd_reply (ipc.c:482)
>==11429==    by 0x5564A2D: named_pipe (ipc.c:537)
>==11429==    by 0x5564D6C: handle_trans (ipc.c:594)
>==11429==    by 0x5565A4E: reply_trans (ipc.c:779)
>==11429==    by 0x55F46BB: switch_message (process.c:1573)
>==11429==    by 0x55F4845: construct_reply (process.c:1609)
>==11429==    by 0x55F4B8B: process_smb (process.c:1687)
>==11429==  Uninitialised value was created by a stack allocation
>==11429==    at 0x54E8500: ??? (in /home/metze/master3/bin/default/source3/libsmbd_base.so)
>==11429== 
>==11429== 
>==11429== HEAP SUMMARY:
>==11429==     in use at exit: 119,607 bytes in 1,046 blocks
>==11429==   total heap usage: 1,496,731 allocs, 1,495,685 frees, 100,098,487 bytes allocated
>==11429== 
>==11429== LEAK SUMMARY:
>==11429==    definitely lost: 116 bytes in 10 blocks
>==11429==    indirectly lost: 641 bytes in 23 blocks
>==11429==      possibly lost: 80,392 bytes in 567 blocks
>==11429==    still reachable: 38,458 bytes in 446 blocks
>==11429==         suppressed: 0 bytes in 0 blocks
>==11429== Rerun with --leak-check=full to see details of leaked memory
>==11429== 
>==11429== For counts of detected and suppressed errors, rerun with: -v
>==11429== ERROR SUMMARY: 618 errors from 8 contexts (suppressed: 12 from 6)
>==11974== Use of uninitialised value of size 8
>==11974==    at 0xBB86CE0: ndr_print_winreg_Type (ndr_misc.c:203)
>==11974==    by 0x9FAD0D4: ndr_print_winreg_QueryValue (ndr_winreg.c:2794)
>==11974==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11974==    by 0x570C6A7: api_winreg_QueryValue (srv_winreg.c:1397)
>==11974==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11974==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11974==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11974==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11974==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11974==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11974==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11974==    by 0x5C390D4: dcerpc_winreg_query_binary (cli_winreg.c:120)
>==11974==    by 0x56DB778: winreg_get_printer (srv_spoolss_util.c:1866)
>==11974==    by 0x56AC19C: set_printer_hnd_name (srv_spoolss_nt.c:689)
>==11974==    by 0x56AC694: open_printer_hnd (srv_spoolss_nt.c:775)
>==11974==    by 0x56AEAE8: _spoolss_OpenPrinterEx (srv_spoolss_nt.c:1735)
>==11974==    by 0x56AE890: _spoolss_OpenPrinter (srv_spoolss_nt.c:1658)
>==11974==    by 0x56C43E8: api_spoolss_OpenPrinter (srv_spoolss.c:144)
>==11974==    by 0x56A93AB: api_rpcTNP (srv_pipe.c:1618)
>==11974==    by 0x56A8F7E: api_pipe_request (srv_pipe.c:1550)
>==11974==    by 0x56A9C95: process_request_pdu (srv_pipe.c:1808)
>==11974==    by 0x56A9FAF: process_complete_pdu (srv_pipe.c:1864)
>==11974==    by 0x56A3913: process_incoming_data (srv_pipe_hnd.c:218)
>==11974==    by 0x56A3A18: write_to_internal_pipe (srv_pipe_hnd.c:244)
>==11974==    by 0x56A4378: np_write_send (srv_pipe_hnd.c:538)
>==11974==    by 0x5563B29: api_dcerpc_cmd (ipc.c:271)
>==11974==    by 0x5564781: api_fd_reply (ipc.c:482)
>==11974==    by 0x5564A2D: named_pipe (ipc.c:537)
>==11974==    by 0x5564D6C: handle_trans (ipc.c:594)
>==11974==    by 0x5565A4E: reply_trans (ipc.c:779)
>==11974==  Uninitialised value was created by a stack allocation
>==11974==    at 0x54E8500: ??? (in /home/metze/master3/bin/default/source3/libsmbd_base.so)
>==11974== 
>==11974== Use of uninitialised value of size 8
>==11974==    at 0xBB86CE0: ndr_print_winreg_Type (ndr_misc.c:203)
>==11974==    by 0x9FAD2E9: ndr_print_winreg_QueryValue (ndr_winreg.c:2824)
>==11974==    by 0xBB83497: ndr_print_function_debug (ndr.c:292)
>==11974==    by 0x570C777: api_winreg_QueryValue (srv_winreg.c:1414)
>==11974==    by 0x5C3BBFA: rpcint_dispatch (rpc_ncacn_np.c:225)
>==11974==    by 0x5C3BF08: rpcint_bh_raw_call_send (rpc_ncacn_np.c:323)
>==11974==    by 0xC43391D: dcerpc_binding_handle_raw_call_send (binding_handle.c:133)
>==11974==    by 0xC434265: dcerpc_binding_handle_call_send (binding_handle.c:414)
>==11974==    by 0xC4346A3: dcerpc_binding_handle_call (binding_handle.c:534)
>==11974==    by 0xB41F088: dcerpc_winreg_QueryValue_r (ndr_winreg_c.c:3937)
>==11974==    by 0xB41F704: dcerpc_winreg_QueryValue (ndr_winreg_c.c:4108)
>==11974==    by 0x5C390D4: dcerpc_winreg_query_binary (cli_winreg.c:120)
>==11974==    by 0x56DB778: winreg_get_printer (srv_spoolss_util.c:1866)
>==11974==    by 0x56AC19C: set_printer_hnd_name (srv_spoolss_nt.c:689)
>==11974==    by 0x56AC694: open_printer_hnd (srv_spoolss_nt.c:775)
>==11974==    by 0x56AEAE8: _spoolss_OpenPrinterEx (srv_spoolss_nt.c:1735)
>==11974==    by 0x56AE890: _spoolss_OpenPrinter (srv_spoolss_nt.c:1658)
>==11974==    by 0x56C43E8: api_spoolss_OpenPrinter (srv_spoolss.c:144)
>==11974==    by 0x56A93AB: api_rpcTNP (srv_pipe.c:1618)
>==11974==    by 0x56A8F7E: api_pipe_request (srv_pipe.c:1550)
>==11974==    by 0x56A9C95: process_request_pdu (srv_pipe.c:1808)
>==11974==    by 0x56A9FAF: process_complete_pdu (srv_pipe.c:1864)
>==11974==    by 0x56A3913: process_incoming_data (srv_pipe_hnd.c:218)
>==11974==    by 0x56A3A18: write_to_internal_pipe (srv_pipe_hnd.c:244)
>==11974==    by 0x56A4378: np_write_send (srv_pipe_hnd.c:538)
>==11974==    by 0x5563B29: api_dcerpc_cmd (ipc.c:271)
>==11974==    by 0x5564781: api_fd_reply (ipc.c:482)
>==11974==    by 0x5564A2D: named_pipe (ipc.c:537)
>==11974==    by 0x5564D6C: handle_trans (ipc.c:594)
>==11974==    by 0x5565A4E: reply_trans (ipc.c:779)
>==11974==  Uninitialised value was created by a stack allocation
>==11974==    at 0x54E8500: ??? (in /home/metze/master3/bin/default/source3/libsmbd_base.so)
>==11974== 
>==12156== 
>==12156== HEAP SUMMARY:
>==12156==     in use at exit: 119,541 bytes in 1,049 blocks
>==12156==   total heap usage: 878,234 allocs, 877,185 frees, 92,192,222 bytes allocated
>==12156== 
>==12156== LEAK SUMMARY:
>==12156==    definitely lost: 154 bytes in 14 blocks
>==12156==    indirectly lost: 641 bytes in 23 blocks
>==12156==      possibly lost: 80,288 bytes in 566 blocks
>==12156==    still reachable: 38,458 bytes in 446 blocks
>==12156==         suppressed: 0 bytes in 0 blocks
>==12156== Rerun with --leak-check=full to see details of leaked memory
>==12156== 
>==12156== For counts of detected and suppressed errors, rerun with: -v
>==12156== ERROR SUMMARY: 18 errors from 6 contexts (suppressed: 12 from 6)
>==12219== 
>==12219== HEAP SUMMARY:
>==12219==     in use at exit: 119,560 bytes in 1,051 blocks
>==12219==   total heap usage: 1,008,756 allocs, 1,007,705 frees, 108,417,125 bytes allocated
>==12219== 
>==12219== LEAK SUMMARY:
>==12219==    definitely lost: 173 bytes in 16 blocks
>==12219==    indirectly lost: 641 bytes in 23 blocks
>==12219==      possibly lost: 80,288 bytes in 566 blocks
>==12219==    still reachable: 38,458 bytes in 446 blocks
>==12219==         suppressed: 0 bytes in 0 blocks
>==12219== Rerun with --leak-check=full to see details of leaked memory
>==12219== 
>==12219== For counts of detected and suppressed errors, rerun with: -v
>==12219== ERROR SUMMARY: 18 errors from 6 contexts (suppressed: 12 from 6)
>==13851== 
>==13851== HEAP SUMMARY:
>==13851==     in use at exit: 119,579 bytes in 1,053 blocks
>==13851==   total heap usage: 1,882,440 allocs, 1,881,387 frees, 207,912,117 bytes allocated
>==13851== 
>==13851== LEAK SUMMARY:
>==13851==    definitely lost: 192 bytes in 18 blocks
>==13851==    indirectly lost: 641 bytes in 23 blocks
>==13851==      possibly lost: 80,288 bytes in 566 blocks
>==13851==    still reachable: 38,458 bytes in 446 blocks
>==13851==         suppressed: 0 bytes in 0 blocks
>==13851== Rerun with --leak-check=full to see details of leaked memory
>==13851== 
>==13851== For counts of detected and suppressed errors, rerun with: -v
>==13851== ERROR SUMMARY: 18 errors from 6 contexts (suppressed: 12 from 6)
>==11974== Syscall param capget(data) points to unaddressable byte(s)
>==11974==    at 0x7716B87: capget (syscall-template.S:82)
>==11974==    by 0xEEE97E2: cap_init (in /lib/libcap.so.2.17)
>==11974==    by 0xEEE99D5: cap_get_proc (in /lib/libcap.so.2.17)
>==11974==    by 0x6F923F6: set_process_capability (system.c:1035)
>==11974==    by 0x6F92644: drop_effective_capability (system.c:1107)
>==11974==    by 0x6F96E84: smbrun_internal (smbrun.c:76)
>==11974==    by 0x6F97258: smbrun_no_sanitize (smbrun.c:212)
>==11974==    by 0x554AE92: print_run_command (print_generic.c:88)
>==11974==    by 0x554B7AE: generic_queue_pause (print_generic.c:277)
>==11974==    by 0x5520312: print_queue_pause (printing.c:3261)
>==11974==    by 0x56B892F: control_printer (srv_spoolss_nt.c:5864)
>==11974==    by 0x56BAFAD: _spoolss_SetPrinter (srv_spoolss_nt.c:6711)
>==11974==    by 0x56C55A0: api_spoolss_SetPrinter (srv_spoolss.c:621)
>==11974==    by 0x56A93AB: api_rpcTNP (srv_pipe.c:1618)
>==11974==    by 0x56A8F7E: api_pipe_request (srv_pipe.c:1550)
>==11974==    by 0x56A9C95: process_request_pdu (srv_pipe.c:1808)
>==11974==    by 0x56A9FAF: process_complete_pdu (srv_pipe.c:1864)
>==11974==    by 0x56A3913: process_incoming_data (srv_pipe_hnd.c:218)
>==11974==    by 0x56A3A18: write_to_internal_pipe (srv_pipe_hnd.c:244)
>==11974==    by 0x56A4378: np_write_send (srv_pipe_hnd.c:538)
>==11974==    by 0x5563B29: api_dcerpc_cmd (ipc.c:271)
>==11974==    by 0x5564781: api_fd_reply (ipc.c:482)
>==11974==    by 0x5564A2D: named_pipe (ipc.c:537)
>==11974==    by 0x5564D6C: handle_trans (ipc.c:594)
>==11974==    by 0x5565A4E: reply_trans (ipc.c:779)
>==11974==    by 0x55F46BB: switch_message (process.c:1573)
>==11974==    by 0x55F4845: construct_reply (process.c:1609)
>==11974==    by 0x55F4B8B: process_smb (process.c:1687)
>==11974==    by 0x55F634D: smbd_server_connection_read_handler (process.c:2308)
>==11974==    by 0x55F63C0: smbd_server_connection_handler (process.c:2325)
>==11974==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
>==11974==

Actions: View

Attachments on bug 8240: 6591 | 6598