The Samba-Bugzilla – Attachment 7383 Details for
Bug 8799
talloc access after free in dcerpc_bh_raw_call_done / dcerpc_connection_dead
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
Backtrace with commit 7b1fb088421565f1752acde02377237e4ca19248 applied
core-ucs22-2012-03-13.backtrace (text/plain), 4.87 KB, created by
Janis Meybohm
on 2012-03-13 10:51:44 UTC
(
hide
)
Description:
Backtrace with commit 7b1fb088421565f1752acde02377237e4ca19248 applied
Filename:
MIME Type:
Creator:
Janis Meybohm
Created:
2012-03-13 10:51:44 UTC
Size:
4.87 KB
patch
obsolete
>Core was generated by `/usr/sbin/samba -D'. >Program terminated with signal 6, Aborted. >#0 0xb771e424 in __kernel_vsyscall () >#0 0xb771e424 in __kernel_vsyscall () >No symbol table info available. >#1 0xb6d8b781 in raise () from /lib/i686/cmov/libc.so.6 >No symbol table info available. >#2 0xb6d8ebb2 in abort () from /lib/i686/cmov/libc.so.6 >No symbol table info available. >#3 0xb76e8a1f in smb_panic_default (why=0xb6ec588c "Bad talloc magic value - unknown value") at ../lib/util/fault.c:147 > result = -1226019692 > __FUNCTION__ = "smb_panic_default" >#4 0xb76e8a60 in smb_panic (why=0xb6ec588c "Bad talloc magic value - unknown value") at ../lib/util/fault.c:160 >No locals. >#5 0xb6ebf39a in ?? () from /usr/lib/libtalloc.so.2 >No symbol table info available. >#6 0xb6ebf6e1 in talloc_get_name () from /usr/lib/libtalloc.so.2 >No symbol table info available. >#7 0xb6ec185c in _talloc_get_type_abort () from /usr/lib/libtalloc.so.2 >No symbol table info available. >#8 0xb751073d in dcerpc_bh_raw_call_done (subreq=0x98cc560) at ../source4/librpc/rpc/dcerpc.c:246 > req = 0x92f0b88 > state = 0x95dbab8 > status = {v = 3221225653} > fault_code = 0 >#9 0xb75120e7 in dcerpc_connection_dead (conn=0x964aa88, status=...) at ../source4/librpc/rpc/dcerpc.c:995 > req = 0x98cc560 >#10 0xb75124f2 in dcerpc_timeout_handler (ev=0x9157b20, te=0x933f768, t=..., private_data=0x98cc560) at ../source4/librpc/rpc/dcerpc.c:1120 > req = 0x98cc560 >#11 0xb6eaef8a in tevent_common_loop_timer_delay () from /usr/lib/libtevent.so.0 >No symbol table info available. >#12 0xb6eae879 in ?? () from /usr/lib/libtevent.so.0 >No symbol table info available. >#13 0xb6eaad28 in _tevent_loop_once () from /usr/lib/libtevent.so.0 >No symbol table info available. >#14 0xb6eaadbf in tevent_common_loop_wait () from /usr/lib/libtevent.so.0 >No symbol table info available. >#15 0xb6eaaa98 in _tevent_loop_wait () from /usr/lib/libtevent.so.0 >No symbol table info available. >#16 0xb65e91cc in standard_new_task (ev=0x9157b20, lp_ctx=0x914cf88, service_name=0xb642f17b "winbind", new_task=0xb7659e59 <task_server_callback>, private_data=0x91d3cb8) at ../source4/smbd/process_standard.c:199 > pid = 23953 >#17 0xb765a026 in task_server_startup (event_ctx=0x9157b20, lp_ctx=0x914cf88, service_name=0xb642f17b "winbind", model_ops=0xb65ea6d8, task_init=0xb64188df <winbind_task_init>) at ../source4/smbd/service_task.c:110 > state = 0x91d3cb8 >#18 0xb7658535 in server_service_init (name=0x914e988 "winbind", event_context=0x9157b20, lp_ctx=0x914cf88, model_ops=0xb65ea6d8) at ../source4/smbd/service.c:63 > srv = 0x91577c0 >#19 0xb7658682 in server_service_startup (event_ctx=0x9157b20, lp_ctx=0x914cf88, model=0x8056119 "standard", server_services=0x914ea08) at ../source4/smbd/service.c:95 > status = {v = 0} > i = 7 > model_ops = 0xb65ea6d8 > __FUNCTION__ = "server_service_startup" >#20 0x08052418 in binary_smbd_main (binary_name=0x8055f77 "samba", argc=2, argv=0xbfb72a24) at ../source4/smbd/server.c:463 > opt_daemon = true > opt_interactive = false > opt = -1 > pc = 0x914c028 > static_init = {0xb76582fc <server_service_auth_init>, 0xb765aeed <server_service_echo_init>, 0} > shared_init = 0x916b258 > event_ctx = 0x9157b20 > stdin_event_flags = 0 > status = {v = 0} > model = 0x8056119 "standard" > max_runtime = 0 > long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0xb6ebc8e0, val = 0, descrip = 0x8056122 "Help options:", argDescrip = 0x0}, {longName = 0x8056130 "daemon", shortName = 68 'D', argInfo = 0, arg = 0x0, val = 1000, descrip = 0x8056137 "Become a daemon (default)", argDescrip = 0x0}, {longName = 0x8056151 "interactive", shortName = 105 'i', argInfo = 0, arg = 0x0, val = 1001, descrip = 0x8056160 "Run interactive (not a daemon)", argDescrip = 0x0}, {longName = 0x805617f "model", shortName = 77 'M', argInfo = 1, arg = 0x0, val = 1002, descrip = 0x8056185 "Select process model", argDescrip = 0x805619a "MODEL"}, {longName = 0x80561a0 "maximum-runtime", shortName = 0 '\000', argInfo = 2, arg = 0xbfb728f8, val = 0, descrip = 0x80561b0 "set maximum runtime of the server process, till autotermination", argDescrip = 0x80561f0 "seconds"}, {longName = 0x80561f8 "show-build", shortName = 98 'b', argInfo = 0, arg = 0x0, val = 1003, descrip = 0x8056203 "show build info", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x8057700, val = 0, descrip = 0x8056213 "Common samba options:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x8057800, val = 0, descrip = 0x8056213 "Common samba options:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, argDescrip = 0x0}} > __FUNCTION__ = "binary_smbd_main" >#21 0x08052503 in main (argc=2, argv=0xbfb72a24) at ../source4/smbd/server.c:483 >No locals.
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 8799
:
7361
|
7362
| 7383