Attachment 8826 Details for Bug 9827 – smbd backtrace for client pccom1

smbd backtrace for client pccom1

gdb.pccom1.txt (text/plain), 7.85 KB, created by Serge Coulon on 2013-04-29 09:24:41 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Serge Coulon

Created: 2013-04-29 09:24:41 UTC

Size: 7.85 KB

patch

obsolete

>root@bambi:/var/log/samba/cores/smbd# gdb /usr/sbin/smbd core
>GNU gdb (GDB) 7.4.1-debian
>Copyright (C) 2012 Free Software Foundation, Inc.
>License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
>This is free software: you are free to change and redistribute it.
>There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
>and "show warranty" for details.
>This GDB was configured as "x86_64-linux-gnu".
>For bug reporting instructions, please see:
><http://www.gnu.org/software/gdb/bugs/>...
>Reading symbols from /usr/sbin/smbd...Reading symbols from /usr/lib/debug/.build-id/63/36e23b105436ebf2dd3b9d8f65f8d96f3ba6be.debug...done.
>done.
>[New LWP 23923]
>
>warning: Can't read pathname for load map: Erreur d'entrÃ©e/sortie.
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
>Core was generated by `/usr/sbin/smbd -D'.
>Program terminated with signal 6, Aborted.
>#0  0x00007f0ee1c4a475 in raise () from /lib/x86_64-linux-gnu/libc.so.6
>(gdb) bt
>#0  0x00007f0ee1c4a475 in raise () from /lib/x86_64-linux-gnu/libc.so.6
>#1  0x00007f0ee1c4d6f0 in abort () from /lib/x86_64-linux-gnu/libc.so.6
>#2  0x00007f0ee52aebbb in dump_core () at lib/fault.c:391
>#3  0x00007f0ee52bd34e in smb_panic (why=why@entry=0x7f0ee569589e "internal error") at lib/util.c:1133
>#4  0x00007f0ee52ae4e4 in fault_report (sig=<optimized out>) at lib/fault.c:53
>#5  sig_fault (sig=<optimized out>) at lib/fault.c:76
>#6  <signal handler called>
>#7  tcopy_passwd (mem_ctx=mem_ctx@entry=0x7f0ee682bbe0, from=0x4850) at ../lib/util/util_pw.c:82
>#8  0x00007f0ee525ada6 in pdb_copy_sam_account (dst=dst@entry=0x7f0ee682bbe0, src=0x7f0ee6849210) at passdb/passdb.c:2114
>#9  0x00007f0ee525df85 in pdb_getsampwsid (sam_acct=sam_acct@entry=0x7f0ee682bbe0, sid=sid@entry=0x7fff680116a0)
>    at passdb/pdb_interface.c:414
>#10 0x00007f0ee5195441 in _samr_OpenUser (p=p@entry=0x7f0ee683c4c0, r=r@entry=0x7f0ee682a5e0) at rpc_server/samr/srv_samr_nt.c:2204
>#11 0x00007f0ee51a5625 in api_samr_OpenUser (p=0x7f0ee683c4c0) at librpc/gen_ndr/srv_samr.c:2745
>#12 0x00007f0ee51b5f76 in rpcint_dispatch (out_data=0x7f0ee682c430, in_data=0x7f0ee682c420, opnum=<optimized out>, 
>    mem_ctx=0x7f0ee682c420, p=0x7f0ee683c4c0) at rpc_server/rpc_ncacn_np.c:210
>#13 rpcint_bh_raw_call_send (mem_ctx=<optimized out>, ev=0x7f0ee6821a90, h=<optimized out>, object=<optimized out>, 
>    opnum=<optimized out>, in_flags=<optimized out>, in_data=0x7f0ee682b6e0 "", in_length=28) at rpc_server/rpc_ncacn_np.c:308
>#14 0x00007f0ee532f4ee in dcerpc_binding_handle_raw_call_send (mem_ctx=<optimized out>, ev=ev@entry=0x7f0ee6821a90, 
>    h=h@entry=0x7f0ee683c380, object=object@entry=0x0, opnum=opnum@entry=34, in_flags=1048576, in_data=0x7f0ee682b6e0 "", in_length=28)
>    at ../librpc/rpc/binding_handle.c:133
>#15 0x00007f0ee532fcd8 in dcerpc_binding_handle_call_send (mem_ctx=mem_ctx@entry=0x7f0ee6824630, ev=ev@entry=0x7f0ee6821a90, 
>    h=h@entry=0x7f0ee683c380, object=0x0, table=table@entry=0x7f0ee5a14320, opnum=opnum@entry=34, r_mem=r_mem@entry=0x7f0ee683b9e0, 
>    r_ptr=0x7fff680118f0) at ../librpc/rpc/binding_handle.c:414
>#16 0x00007f0ee532fe07 in dcerpc_binding_handle_call (h=h@entry=0x7f0ee683c380, object=object@entry=0x0, table=0x7f0ee5a14320, 
>    opnum=opnum@entry=34, r_mem=r_mem@entry=0x7f0ee683b9e0, r_ptr=r_ptr@entry=0x7fff680118f0) at ../librpc/rpc/binding_handle.c:534
>#17 0x00007f0ee522907d in dcerpc_samr_OpenUser_r (h=h@entry=0x7f0ee683c380, mem_ctx=mem_ctx@entry=0x7f0ee683b9e0, 
>    r=r@entry=0x7fff680118f0) at librpc/gen_ndr/ndr_samr_c.c:7529
>#18 0x00007f0ee52292ad in dcerpc_samr_OpenUser (h=h@entry=0x7f0ee683c380, mem_ctx=mem_ctx@entry=0x7f0ee683b9e0, 
>    _domain_handle=_domain_handle@entry=0x7fff680119b0, _access_mask=_access_mask@entry=33554432, _rid=_rid@entry=1011, 
>    _user_handle=_user_handle@entry=0x7fff68011aa0, result=result@entry=0x7fff68011940) at librpc/gen_ndr/ndr_samr_c.c:7664
>#19 0x00007f0ee514833b in samr_find_machine_account (mem_ctx=mem_ctx@entry=0x7f0ee683b9e0, b=0x7f0ee683c380, 
>    account_name=account_name@entry=0x7f0ee683b550 "PCCOM1$", domain_sid_p=domain_sid_p@entry=0x7fff68011a78, 
>    user_rid_p=user_rid_p@entry=0x7fff68011a6c, user_handle=user_handle@entry=0x7fff68011aa0, access_mask=33554432)
>    at rpc_server/netlogon/srv_netlog_nt.c:600
>#20 0x00007f0ee5149332 in get_md4pw (msg_ctx=0x7f0ee67edca0, sid=0x7fff68011ac0, sec_chan_type=SEC_CHAN_WKSTA, 
>    mach_acct=0x7f0ee683b550 "PCCOM1$", md4pw=0x7fff68011a90) at rpc_server/netlogon/srv_netlog_nt.c:699
>#21 _netr_ServerAuthenticate3 (p=p@entry=0x7f0ee682e7b0, r=r@entry=0x7f0ee683b150) at rpc_server/netlogon/srv_netlog_nt.c:947
>#22 0x00007f0ee514e826 in api_netr_ServerAuthenticate3 (p=0x7f0ee682e7b0) at librpc/gen_ndr/srv_netlogon.c:2168
>#23 0x00007f0ee51b1e55 in api_rpcTNP (p=p@entry=0x7f0ee682e7b0, api_rpc_cmds=<optimized out>, n_cmds=<optimized out>, 
>    pkt=<error reading variable: Unhandled dwarf expression opcode 0xfa>, 
>    pkt=<error reading variable: Unhandled dwarf expression opcode 0xfa>) at rpc_server/srv_pipe.c:1647
>#24 0x00007f0ee51b35bb in api_pipe_request (pkt=0x7f0ee682cbe0, p=0x7f0ee682e7b0) at rpc_server/srv_pipe.c:1580
>#25 process_request_pdu (pkt=0x7f0ee682cbe0, p=0x7f0ee682e7b0) at rpc_server/srv_pipe.c:1837
>#26 process_complete_pdu (p=p@entry=0x7f0ee682e7b0) at rpc_server/srv_pipe.c:1894
>#27 0x00007f0ee51b4448 in process_incoming_data (p=p@entry=0x7f0ee682e7b0, data=data@entry=0x7f0ee683abe4 "h", n=<optimized out>)
>    at rpc_server/srv_pipe_hnd.c:218
>#28 0x00007f0ee51b4b20 in write_to_internal_pipe (n=128, data=0x7f0ee683abe4 "h", p=0x7f0ee682e7b0) at rpc_server/srv_pipe_hnd.c:244
>#29 np_write_send (mem_ctx=mem_ctx@entry=0x7f0ee683ada0, ev=0x7f0ee67eb4f0, handle=handle@entry=0x7f0ee6826a00, 
>    data=data@entry=0x7f0ee683abd4 "\005", len=len@entry=128) at rpc_server/srv_pipe_hnd.c:538
>#30 0x00007f0ee4fca075 in reply_pipe_write_and_X (req=0x7f0ee6831110, req@entry=0x7f0ee683acb0) at smbd/pipes.c:322
>#31 0x00007f0ee4fd38d8 in reply_write_and_X (req=req@entry=0x7f0ee683acb0) at smbd/reply.c:4531
>#32 0x00007f0ee501608c in switch_message (type=47 '/', req=req@entry=0x7f0ee683acb0, size=size@entry=196) at smbd/process.c:1574
>#33 0x00007f0ee5016492 in construct_reply (deferred_pcd=0x0, encrypted=false, seqnum=<optimized out>, unread_bytes=0, size=196, 
>    inbuf=0x0, sconn=0x7f0ee67eb5b0) at smbd/process.c:1610
>#34 process_smb (sconn=sconn@entry=0x7f0ee67eb5b0, inbuf=<optimized out>, nread=196, unread_bytes=0, seqnum=<optimized out>, 
>    encrypted=false, deferred_pcd=deferred_pcd@entry=0x0) at smbd/process.c:1688
>#35 0x00007f0ee50168d1 in smbd_server_connection_read_handler (conn=0x7f0ee67eb5b0, fd=10) at smbd/process.c:2317
>#36 0x00007f0ee52ccd13 in run_events_poll (num_pfds=2, pfds=0x7f0ee68257a0, pollrtn=<optimized out>, ev=0x7f0ee67eb4f0)
>    at lib/events.c:286
>#37 run_events_poll (ev=0x7f0ee67eb4f0, pollrtn=pollrtn@entry=1, pfds=0x7f0ee68257a0, num_pfds=2) at lib/events.c:184
>#38 0x00007f0ee501803a in smbd_server_connection_loop_once (conn=0x7f0ee67eb5b0) at smbd/process.c:1017
>#39 smbd_process (sconn=0x7f0ee67eb5b0) at smbd/process.c:3158
>#40 0x00007f0ee552b443 in smbd_accept_connection (ev=<optimized out>, fde=<optimized out>, flags=<optimized out>, 
>    private_data=<optimized out>) at smbd/server.c:514
>#41 0x00007f0ee52ccd13 in run_events_poll (num_pfds=5, pfds=0x7f0ee6810660, pollrtn=<optimized out>, ev=0x7f0ee67eb4f0)
>    at lib/events.c:286
>#42 run_events_poll (ev=0x7f0ee67eb4f0, pollrtn=<optimized out>, pfds=0x7f0ee6810660, num_pfds=5) at lib/events.c:184
>#43 0x00007f0ee52cceaa in s3_event_loop_once (ev=0x7f0ee67eb4f0, location=<optimized out>) at lib/events.c:349
>#44 0x00007f0ee52cda10 in _tevent_loop_once (ev=0x7f0ee67eb4f0, location=location@entry=0x7f0ee57331e9 "smbd/server.c:847")
>    at ../lib/tevent/tevent.c:494
>#45 0x00007f0ee4f96850 in smbd_parent_loop (parent=<optimized out>) at smbd/server.c:847
>#46 main (argc=<optimized out>, argv=0x7f0ee67edca0) at smbd/server.c:1327
>

Actions: View

Attachments on bug 9827: 8810 | 8826 | 8827