The Samba-Bugzilla – Attachment 7361 Details for
Bug 8799
talloc access after free in dcerpc_bh_raw_call_done / dcerpc_connection_dead
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
Ths was observed with a pre-alpha18 git snapshot. The full backtrace is attached.
core-ucs51-2012-03-06.backtrace (text/plain), 4.88 KB, created by
Arvid Requate
on 2012-03-07 14:44:56 UTC
(
hide
)
Description:
Ths was observed with a pre-alpha18 git snapshot. The full backtrace is attached.
Filename:
MIME Type:
Creator:
Arvid Requate
Created:
2012-03-07 14:44:56 UTC
Size:
4.88 KB
patch
obsolete
>#0 0xb77c2424 in __kernel_vsyscall () >No symbol table info available. >#1 0xb6e30751 in raise () from /lib/i686/cmov/libc.so.6 >No symbol table info available. >#2 0xb6e33b82 in abort () from /lib/i686/cmov/libc.so.6 >No symbol table info available. >#3 0xb778ca1f in smb_panic_default (why=0xb6f69860 "Bad talloc magic value - access after free") at ../lib/util/fault.c:147 > result = -1225347948 > __FUNCTION__ = "smb_panic_default" >#4 0xb778ca60 in smb_panic (why=0xb6f69860 "Bad talloc magic value - access after free") at ../lib/util/fault.c:160 >No locals. >#5 0xb6f6339a in ?? () from /usr/lib/libtalloc.so.2 >No symbol table info available. >#6 0xb6f636c2 in talloc_get_name () from /usr/lib/libtalloc.so.2 >No symbol table info available. >#7 0xb6f6585c in _talloc_get_type_abort () from /usr/lib/libtalloc.so.2 >No symbol table info available. >#8 0xb75b46d4 in dcerpc_bh_raw_call_done (subreq=0x858c908) at ../source4/librpc/rpc/dcerpc.c:244 > req = 0x81efda0 > state = 0x85fa938 > status = {v = 3221225653} > fault_code = 0 >#9 0xb75b606a in dcerpc_connection_dead (conn=0x83f8958, status=...) at ../source4/librpc/rpc/dcerpc.c:980 > req = 0x858c908 >#10 0xb75b6475 in dcerpc_timeout_handler (ev=0x807e5f0, te=0x8783690, t=..., private_data=0x858c908) at ../source4/librpc/rpc/dcerpc.c:1105 > req = 0x858c908 >#11 0xb6f52f8a in tevent_common_loop_timer_delay () from /usr/lib/libtevent.so.0 >No symbol table info available. >#12 0xb6f52879 in ?? () from /usr/lib/libtevent.so.0 >No symbol table info available. >#13 0xb6f4ed28 in _tevent_loop_once () from /usr/lib/libtevent.so.0 >No symbol table info available. >#14 0xb6f4edbf in tevent_common_loop_wait () from /usr/lib/libtevent.so.0 >No symbol table info available. >#15 0xb6f4ea98 in _tevent_loop_wait () from /usr/lib/libtevent.so.0 >No symbol table info available. >#16 0xb668f1cc in standard_new_task (ev=0x807e5f0, lp_ctx=0x8072f88, service_name=0xb5e7717b "winbind", new_task=0xb76fde59 <task_server_callback>, > private_data=0x807f420) at ../source4/smbd/process_standard.c:199 > pid = 9887 >#17 0xb76fe026 in task_server_startup (event_ctx=0x807e5f0, lp_ctx=0x8072f88, service_name=0xb5e7717b "winbind", model_ops=0xb66906d8, > task_init=0xb5e608df <winbind_task_init>) at ../source4/smbd/service_task.c:110 > state = 0x807f420 >#18 0xb76fc535 in server_service_init (name=0x8074988 "winbind", event_context=0x807e5f0, lp_ctx=0x8072f88, model_ops=0xb66906d8) > at ../source4/smbd/service.c:63 > srv = 0x807e3b0 >#19 0xb76fc682 in server_service_startup (event_ctx=0x807e5f0, lp_ctx=0x8072f88, model=0x8056111 "standard", server_services=0x8074a08) > at ../source4/smbd/service.c:95 > status = {v = 0} > i = 7 > model_ops = 0xb66906d8 > __FUNCTION__ = "server_service_startup" >#20 0x08052418 in binary_smbd_main (binary_name=0x8055f77 "samba", argc=2, argv=0xbf8350f4) at ../source4/smbd/server.c:463 > opt_daemon = true > opt_interactive = false > opt = -1 > pc = 0x8072028 > static_init = {0xb76fc2fc <server_service_auth_init>, 0xb76feeed <server_service_echo_init>, 0} > shared_init = 0x8091b50 > event_ctx = 0x807e5f0 > stdin_event_flags = 0 > status = {v = 0} > model = 0x8056111 "standard" > max_runtime = 0 > long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0xb6f608e0, val = 0, descrip = 0x805611a "Help options:", > argDescrip = 0x0}, {longName = 0x8056128 "daemon", shortName = 68 'D', argInfo = 0, arg = 0x0, val = 1000, > descrip = 0x805612f "Become a daemon (default)", argDescrip = 0x0}, {longName = 0x8056149 "interactive", shortName = 105 'i', argInfo = 0, > arg = 0x0, val = 1001, descrip = 0x8056158 "Run interactive (not a daemon)", argDescrip = 0x0}, {longName = 0x8056177 "model", > shortName = 77 'M', argInfo = 1, arg = 0x0, val = 1002, descrip = 0x805617d "Select process model", argDescrip = 0x8056192 "MODEL"}, { > longName = 0x8056198 "maximum-runtime", shortName = 0 '\000', argInfo = 2, arg = 0xbf834fc8, val = 0, > descrip = 0x80561a8 "set maximum runtime of the server process, till autotermination", argDescrip = 0x80561e8 "seconds"}, { > longName = 0x80561f0 "show-build", shortName = 98 'b', argInfo = 0, arg = 0x0, val = 1003, descrip = 0x80561fb "show build info", > argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x8057700, val = 0, descrip = 0x805620b "Common samba options:", > argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x8057800, val = 0, descrip = 0x805620b "Common samba options:", > argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, argDescrip = 0x0}} > __FUNCTION__ = "binary_smbd_main" >#21 0x08052503 in main (argc=2, argv=0xbf8350f4) at ../source4/smbd/server.c:483
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 8799
: 7361 |
7362
|
7383