Kerberos: AS-REQ testuser3@CMPNY.NL from ipv4:192.168.1.2:53337 for krbtgt/CMPNY.NL@CMPNY.NL ldb_wrap open of secrets.ldb Kerberos: Client sent patypes: REQ-ENC-PA-REP Kerberos: Looking for PK-INIT(ietf) pa-data -- testuser3@CMPNY.NL Kerberos: Looking for PK-INIT(win2k) pa-data -- testuser3@CMPNY.NL Kerberos: Looking for ENC-TS pa-data -- testuser3@CMPNY.NL Kerberos: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ auth_check_password_send: Checking password for unmapped user [CMPNY]\[ldap-holy]@[(null)] auth_check_password_send: mapped user is: [CMPNY]\[ldap-holy]@[(null)] Kerberos: AS-REQ testuser3@CMPNY.NL from ipv4:192.168.1.2:45869 for krbtgt/CMPNY.NL@CMPNY.NL Kerberos: Client sent patypes: ENC-TS, REQ-ENC-PA-REP Kerberos: Looking for PK-INIT(ietf) pa-data -- testuser3@CMPNY.NL Kerberos: Looking for PK-INIT(win2k) pa-data -- testuser3@CMPNY.NL Kerberos: Looking for ENC-TS pa-data -- testuser3@CMPNY.NL Kerberos: ENC-TS Pre-authentication succeeded -- testuser3@CMPNY.NL using arcfour-hmac-md5 Kerberos: ENC-TS pre-authentication succeeded -- testuser3@CMPNY.NL authsam_account_ok: Account for user 'testuser3@CMPNY.NL' has expired. authsam_account_ok: Account expired at 'Fri Oct 5 20:54:01 2012 CEST'. ==31366== Invalid read of size 4 ==31366== at 0xED130D5: length_PADATA_TYPE (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0xED1C38F: length_PA_DATA (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0xED1DF87: length_METHOD_DATA (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0x16E4AFFF: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E4DD10: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E58163: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E5836E: krb5_kdc_process_krb5_request (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16608253: kdc_process (kdc.c:161) ==31366== by 0x16607ED7: kdc_udp_call_loop (kdc.c:519) ==31366== by 0xB4E7A26: tdgram_recvfrom_done (tsocket.c:239) ==31366== by 0xB4EB052: tdgram_bsd_recvfrom_handler (tsocket_bsd.c:933) ==31366== by 0x8AF5821: ??? (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== Address 0x29a8d620 is 0 bytes inside a block of size 96 free'd ==31366== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==31366== by 0x86DDE28: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DA642: _talloc_free (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x206EFC6D: dsdb_schema_from_db (schema_load.c:329) ==31366== by 0x206F03BB: schema_load_init (schema_load.c:373) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== by 0x1F8C04CB: rootdse_init (rootdse.c:870) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== ==31366== Invalid read of size 8 ==31366== at 0xED598D0: der_length_octet_string (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0xED1C3A6: length_PA_DATA (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0xED1DF87: length_METHOD_DATA (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0x16E4AFFF: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E4DD10: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E58163: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E5836E: krb5_kdc_process_krb5_request (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16608253: kdc_process (kdc.c:161) ==31366== by 0x16607ED7: kdc_udp_call_loop (kdc.c:519) ==31366== by 0xB4E7A26: tdgram_recvfrom_done (tsocket.c:239) ==31366== by 0xB4EB052: tdgram_bsd_recvfrom_handler (tsocket_bsd.c:933) ==31366== by 0x8AF5821: ??? (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== Address 0x29a8d628 is 8 bytes inside a block of size 96 free'd ==31366== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==31366== by 0x86DDE28: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DA642: _talloc_free (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x206EFC6D: dsdb_schema_from_db (schema_load.c:329) ==31366== by 0x206F03BB: schema_load_init (schema_load.c:373) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== by 0x1F8C04CB: rootdse_init (rootdse.c:870) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== ==31366== Warning: silly arg (-4261533023879091) to malloc() ==31366== Invalid read of size 8 ==31366== at 0xED595E4: der_free_octet_string (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0xED1DDA3: free_METHOD_DATA (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0x16E4DC64: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E58163: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E5836E: krb5_kdc_process_krb5_request (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16608253: kdc_process (kdc.c:161) ==31366== by 0x16607ED7: kdc_udp_call_loop (kdc.c:519) ==31366== by 0xB4E7A26: tdgram_recvfrom_done (tsocket.c:239) ==31366== by 0xB4EB052: tdgram_bsd_recvfrom_handler (tsocket_bsd.c:933) ==31366== by 0x8AF5821: ??? (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF28DF: _tevent_loop_once (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF2A6A: tevent_common_loop_wait (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== Address 0x29a8d630 is 16 bytes inside a block of size 96 free'd ==31366== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==31366== by 0x86DDE28: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DA642: _talloc_free (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x206EFC6D: dsdb_schema_from_db (schema_load.c:329) ==31366== by 0x206F03BB: schema_load_init (schema_load.c:373) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== by 0x1F8C04CB: rootdse_init (rootdse.c:870) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== ==31366== Invalid free() / delete / delete[] / realloc() ==31366== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==31366== by 0xED595EC: der_free_octet_string (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0xED1DDA3: free_METHOD_DATA (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0x16E4DC64: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E58163: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E5836E: krb5_kdc_process_krb5_request (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16608253: kdc_process (kdc.c:161) ==31366== by 0x16607ED7: kdc_udp_call_loop (kdc.c:519) ==31366== by 0xB4E7A26: tdgram_recvfrom_done (tsocket.c:239) ==31366== by 0xB4EB052: tdgram_bsd_recvfrom_handler (tsocket_bsd.c:933) ==31366== by 0x8AF5821: ??? (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF28DF: _tevent_loop_once (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== Address 0x10ebe600 is 0 bytes inside a block of size 880 free'd ==31366== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==31366== by 0x86DDE28: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DA642: _talloc_free (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x206EFC6D: dsdb_schema_from_db (schema_load.c:329) ==31366== by 0x206F03BB: schema_load_init (schema_load.c:373) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== by 0x1F8C04CB: rootdse_init (rootdse.c:870) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== by 0x1FED9B79: samba_dsdb_init (samba_dsdb.c:347) ==31366== ==31366== Invalid write of size 8 ==31366== at 0xED595ED: der_free_octet_string (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0xED1DDA3: free_METHOD_DATA (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0x16E4DC64: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E58163: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E5836E: krb5_kdc_process_krb5_request (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16608253: kdc_process (kdc.c:161) ==31366== by 0x16607ED7: kdc_udp_call_loop (kdc.c:519) ==31366== by 0xB4E7A26: tdgram_recvfrom_done (tsocket.c:239) ==31366== by 0xB4EB052: tdgram_bsd_recvfrom_handler (tsocket_bsd.c:933) ==31366== by 0x8AF5821: ??? (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF28DF: _tevent_loop_once (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF2A6A: tevent_common_loop_wait (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== Address 0x29a8d630 is 16 bytes inside a block of size 96 free'd ==31366== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==31366== by 0x86DDE28: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DA642: _talloc_free (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x206EFC6D: dsdb_schema_from_db (schema_load.c:329) ==31366== by 0x206F03BB: schema_load_init (schema_load.c:373) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== by 0x1F8C04CB: rootdse_init (rootdse.c:870) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== ==31366== Invalid write of size 8 ==31366== at 0xED595F5: der_free_octet_string (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0xED1DDA3: free_METHOD_DATA (in /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0) ==31366== by 0x16E4DC64: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E58163: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E5836E: krb5_kdc_process_krb5_request (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16608253: kdc_process (kdc.c:161) ==31366== by 0x16607ED7: kdc_udp_call_loop (kdc.c:519) ==31366== by 0xB4E7A26: tdgram_recvfrom_done (tsocket.c:239) ==31366== by 0xB4EB052: tdgram_bsd_recvfrom_handler (tsocket_bsd.c:933) ==31366== by 0x8AF5821: ??? (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF28DF: _tevent_loop_once (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF2A6A: tevent_common_loop_wait (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== Address 0x29a8d628 is 8 bytes inside a block of size 96 free'd ==31366== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==31366== by 0x86DDE28: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DDDC2: ??? (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x86DA642: _talloc_free (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x206EFC6D: dsdb_schema_from_db (schema_load.c:329) ==31366== by 0x206F03BB: schema_load_init (schema_load.c:373) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== by 0x1F8C04CB: rootdse_init (rootdse.c:870) ==31366== by 0x84B35D2: ldb_module_init_chain (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== Kerberos: AS-REQ testuser3@CMPNY.NL from ipv4:192.168.1.2:40805 for krbtgt/CMPNY.NL@CMPNY.NL Kerberos: Client sent patypes: REQ-ENC-PA-REP Kerberos: Looking for PK-INIT(ietf) pa-data -- testuser3@CMPNY.NL Kerberos: Looking for PK-INIT(win2k) pa-data -- testuser3@CMPNY.NL Kerberos: Looking for ENC-TS pa-data -- testuser3@CMPNY.NL Kerberos: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED' single_terminate: reason[kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED] Kerberos: AS-REQ testuser3@CMPNY.NL from ipv4:192.168.1.2:40806 for krbtgt/CMPNY.NL@CMPNY.NL valgrind: m_mallocfree.c:266 (mk_plain_bszB): Assertion 'bszB != 0' failed. valgrind: This is probably caused by your program erroneously writing past the end of a heap block and corrupting heap metadata. If you fix any invalid writes reported by Memcheck, this assertion failure will probably go away. Please try that before reporting this as a bug. ==31366== at 0x3804CA36: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) ==31366== by 0x3804CBDC: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) ==31366== by 0x3800087C: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) ==31366== by 0x38059084: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) ==31366== by 0x3802144C: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) ==31366== by 0x38021A80: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) ==31366== by 0x38021C6A: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) ==31366== by 0x380902A7: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) ==31366== by 0x3809F7D5: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) sched status: running_tid=1 Thread 1: status = VgTs_Runnable ==31366== at 0x4C2B6CD: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==31366== by 0x86DC247: _talloc_zero (in /usr/lib/x86_64-linux-gnu/libtalloc.so.2.0.7) ==31366== by 0x84B3E61: ldb_module_send_entry (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== by 0x21F22FBB: ltdb_search_indexed (in /usr/lib/x86_64-linux-gnu/ldb/modules/ldb/tdb.so) ==31366== by 0x21F21365: ltdb_search (in /usr/lib/x86_64-linux-gnu/ldb/modules/ldb/tdb.so) ==31366== by 0x21F1FB17: ??? (in /usr/lib/x86_64-linux-gnu/ldb/modules/ldb/tdb.so) ==31366== by 0x8AF601F: tevent_common_loop_timer_delay (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF56BB: ??? (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF28DF: _tevent_loop_once (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x84C96C4: ldb_wait (in /usr/lib/x86_64-linux-gnu/libldb.so.1.1.12) ==31366== by 0x6BB69EF: dsdb_search (util.c:3985) ==31366== by 0x6BB77A8: dsdb_search_one (util.c:4049) ==31366== by 0x776A2B8: sam_get_results_principal (sam.c:495) ==31366== by 0x1706191B: samba_kdc_lookup_client.isra.0 (db-glue.c:1122) ==31366== by 0x17063E60: samba_kdc_fetch (db-glue.c:1147) ==31366== by 0x16E56E61: _kdc_db_fetch (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E4DE2B: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E58163: ??? (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16E5836E: krb5_kdc_process_krb5_request (in /usr/lib/x86_64-linux-gnu/libkdc.so.2.0.0) ==31366== by 0x16608253: kdc_process (kdc.c:161) ==31366== by 0x16607B47: kdc_tcp_call_loop (kdc.c:233) ==31366== by 0x5D06F24: tstream_read_pdu_blob_done (tstream.c:117) ==31366== by 0xB4E7AF3: tstream_readv_done (tsocket.c:604) ==31366== by 0x8AF3161: tevent_common_loop_immediate (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF56AF: ??? (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF28DF: _tevent_loop_once (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x8AF2A6A: tevent_common_loop_wait (in /usr/lib/x86_64-linux-gnu/libtevent.so.0.9.16) ==31366== by 0x14260472: standard_new_task (process_standard.c:199) ==31366== by 0x5D06E2E: task_server_startup (service_task.c:110) ==31366== by 0x5D05A19: server_service_startup (service.c:63) ==31366== by 0x40943F: binary_smbd_main.constprop.1 (server.c:477) ==31366== by 0x8D1C76C: (below main) (libc-start.c:226) Note: see also the FAQ in the source distribution. It contains workarounds to several common problems. In particular, if Valgrind aborted or crashed after identifying problems in your program, there's a good chance that fixing those problems will prevent Valgrind aborting or crashing, especially if it happened in m_mallocfree.c. If that doesn't help, please report this bug to: www.valgrind.org In the bug report, send all the above text, the valgrind version, and what OS and version you are using. Thanks.