The Samba-Bugzilla – Attachment 9375 Details for
Bug 10250
Segfaults: PANIC: Bad talloc magic value - access after free
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
gdb backtrace
gdb.backtrace.txt (text/plain), 8.88 KB, created by
Marc Muehlfeld
on 2013-11-05 06:17:28 UTC
(
hide
)
Description:
gdb backtrace
Filename:
MIME Type:
Creator:
Marc Muehlfeld
Created:
2013-11-05 06:17:28 UTC
Size:
8.88 KB
patch
obsolete
>[Thread debugging using libthread_db enabled] >0x00007f2db4c897ae in waitpid () from /lib64/libc.so.6 >#0 0x00007f2db4c897ae in waitpid () from /lib64/libc.so.6 >No symbol table info available. >#1 0x00007f2db4c1b8c9 in do_system () from /lib64/libc.so.6 >No symbol table info available. >#2 0x00007f2db6366b08 in smb_panic_s3 (why=0x7f2db76116a0 "Bad talloc magic >value - access after free") at ../source3/lib/util.c:798 > cmd = 0x7f2db95850b0 "/usr/local/bin/panic-action 91892" > result = 32557 > __FUNCTION__ = "smb_panic_s3" >#3 0x00007f2db81d3cfb in smb_panic (why=0x7f2db76116a0 "Bad talloc magic >value - access after free") at ../lib/util/fault.c:159 >No locals. >#4 0x00007f2db760d0a9 in talloc_abort (reason=0x7f2db76116a0 "Bad talloc >magic value - access after free") at ../lib/talloc/talloc.c:341 >No locals. >#5 0x00007f2db760d125 in talloc_abort_access_after_free () at >../lib/talloc/talloc.c:357 >No locals. >#6 0x00007f2db760d1a3 in talloc_chunk_from_ptr (ptr=0x7f2db95889c0) at >../lib/talloc/talloc.c:378 > pp = 0x7f2db95889c0 "sbin/smbd(+0xa8d7) [0x7f2db883d8d7]" > tc = 0x7f2db9588960 >#7 0x00007f2db760ec83 in talloc_get_name (ptr=0x7f2db95889c0) at >../lib/talloc/talloc.c:1272 > tc = 0x7f2db94c20e0 >#8 0x00007f2db760ee03 in _talloc_get_type_abort (ptr=0x7f2db95889c0, >name=0x7f2db63a6b7e "struct msg_channel", location=0x7f2db63a6f98 >"../source3/lib/msg_channel.c:290") at ../lib/talloc/talloc.c:1325 > pname = 0x7f2db9588af0 "" >#9 0x00007f2db6372767 in msg_channel_trigger (ev=0x7f2db94c20e0, >im=0x7f2db9588060, priv=0x7f2db95889c0) at ../source3/lib/msg_channel.c:290 > channel = 0x7f2db9588060 > req = 0x0 > state = 0x7f2db760d793 > num_msgs = 140735795209104 > __PRETTY_FUNCTION__ = "msg_channel_trigger" >#10 0x00007f2db73feee4 in tevent_common_loop_immediate (ev=0x7f2db94c20e0) at >../lib/tevent/tevent_immediate.c:135 > im = 0x7f2db9588060 > handler = 0x7f2db6372738 <msg_channel_trigger> > private_data = 0x7f2db95889c0 >#11 0x00007f2db638319b in run_events_poll (ev=0x7f2db94c20e0, pollrtn=0, >pfds=0x0, num_pfds=0) at ../source3/lib/events.c:191 > state = 0x7f2db7aef667 > pollfd_idx = 0x7f2db7aef648 > fde = 0x7f2db9584ff0 > __FUNCTION__ = "run_events_poll" >#12 0x00007f2db6383848 in s3_event_loop_once (ev=0x7f2db94c20e0, >location=0x7f2db7aeff18 "../source3/smbd/process.c:3627") at >../source3/lib/events.c:303 > state = 0x7f2db94c2940 > timeout = 2147483647 > num_pfds = -1220549304 > ret = 32767 > poll_errno = -1693145920 >#13 0x00007f2db73fdfa9 in _tevent_loop_once (ev=0x7f2db94c20e0, >location=0x7f2db7aeff18 "../source3/smbd/process.c:3627") at >../lib/tevent/tevent.c:530 > ret = 32557 > nesting_stack_ptr = 0x0 >#14 0x00007f2db7977a1e in smbd_process (ev_ctx=0x7f2db94c20e0, >msg_ctx=0x7f2db94c21d0, sock_fd=35, interactive=false) at >../source3/smbd/process.c:3627 > frame = 0x7f2db9585050 > conn = 0x7f2db94d40c0 > sconn = 0x7f2db94c7ef0 > ss = {ss_family = 2, __ss_align = 0, __ss_padding = >"\001\000\000\000-\177", '\000' <repeats 19 times>, >"Ó\267-\177\000\000Ц\024\233\377\177\000\000\320!L\271-\177\000\000\360\247\024\233\377\177\000\000\340\207\203\270-\177\000\000\360\255\024\233\377\177\000\000\025Wb\270-\177\000\000\340 >L\271-\177\000\000\000\000\000\000\000\000\000\000#\000\000\000\000\000\000\000\320!L\271-\177\000"} > sa = 0x7fff9b14a630 > sa_socklen = 16 > local_address = 0x7f2db94c29c0 > remote_address = 0x7f2db94db610 > locaddr = 0x7f2db94d2270 "" > remaddr = 0x7f2db94d2e00 "@\026O\271-\177" > rhost = 0x0 > ret = 0 > __FUNCTION__ = "smbd_process" >#15 0x00007f2db883cc38 in smbd_accept_connection (ev=0x7f2db94c20e0, >fde=0x7f2db94dba30, flags=1, private_data=0x7f2db94d3790) at >../source3/smbd/server.c:621 > status = {v = 0} > s = 0x0 > msg_ctx = 0x7f2db94c21d0 > addr = {ss_family = 2, __ss_align = 0, __ss_padding = >"\250\301L\271-\177\000\000 >\250\024\233\377\177\000\000\300\247\024\233\377\177\000\000\340|\034\270-\177\000\000\300\247\024\233\377\177\000\000\353v\034\270-\177\000\000\250\301L\271-\177\000\000 >\250\024\233\377\177\000\000\v\000\000\000\000\000\000\000\v\000\000\000\000\000\000\000`B\003\000\000\000\000\000@)L\271-\177\000\000\200\250\024\233\377\177\000\000\030\061\070\266-\177\000"} > in_addrlen = 16 > fd = 35 > pid = 0 > unique_id = 17831883248013591392 > __FUNCTION__ = "smbd_accept_connection" >#16 0x00007f2db6383688 in run_events_poll (ev=0x7f2db94c20e0, pollrtn=1, >pfds=0x7f2db94d0030, num_pfds=5) at ../source3/lib/events.c:257 > pfd = 0x7f2db94d0040 > flags = 1 > state = 0x7f2db94c2940 > pollfd_idx = 0x7f2db94d8620 > fde = 0x7f2db94dba30 > __FUNCTION__ = "run_events_poll" >#17 0x00007f2db638395e in s3_event_loop_once (ev=0x7f2db94c20e0, >location=0x7f2db8841536 "../source3/smbd/server.c:943") at >../source3/lib/events.c:326 > state = 0x7f2db94c2940 > timeout = 11214 > num_pfds = 5 > ret = 1 > poll_errno = 4 >#18 0x00007f2db73fdfa9 in _tevent_loop_once (ev=0x7f2db94c20e0, >location=0x7f2db8841536 "../source3/smbd/server.c:943") at >../lib/tevent/tevent.c:530 > ret = 32557 > nesting_stack_ptr = 0x0 >#19 0x00007f2db883d8d7 in smbd_parent_loop (ev_ctx=0x7f2db94c20e0, >parent=0x7f2db94c7ef0) at ../source3/smbd/server.c:943 > ret = 0 > frame = 0x7f2db94c4570 > __FUNCTION__ = "smbd_parent_loop" >#20 0x00007f2db883eff9 in main (argc=2, argv=0x7fff9b14adf8) at >../source3/smbd/server.c:1577 > is_daemon = true > interactive = false > Fork = true > no_process_group = false > log_stdout = false > ports = 0x0 > profile_level = 0x0 > opt = -1 > pc = 0x7f2db94c0b90 > print_build_options = false > long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, >arg = 0x7f2db5178420, val = 0, descrip = 0x7f2db8841601 "Help options:", >argDescrip = 0x0}, {longName = 0x7f2db884160f "daemon", shortName = 68 'D', >argInfo = 0, arg = 0x0, val = 1000, descrip = 0x7f2db8841616 "Become a daemon >(default)", argDescrip = 0x0}, {longName = 0x7f2db8841630 "interactive", >shortName = 105 'i', argInfo = 0, arg = 0x0, val = 1001, descrip = >0x7f2db8841640 "Run interactive (not a daemon)", argDescrip = 0x0}, {longName >= 0x7f2db884165f "foreground", shortName = 70 'F', argInfo = 0, arg = 0x0, val >= 1002, descrip = 0x7f2db8841670 "Run daemon in foreground (for daemontools, >etc.)", argDescrip = 0x0}, {longName = 0x7f2db88416a1 "no-process-group", >shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 1003, descrip = >0x7f2db88416b8 "Don't create a new process group", argDescrip = 0x0}, >{longName = 0x7f2db88416d9 "log-stdout", shortName = 83 'S', argInfo = 0, arg >= 0x0, val = 1004, descrip = 0x7f2db88416e4 "Log to stdout", argDescrip = >0x0}, {longName = 0x7f2db88416f2 "build-options", shortName = 98 'b', argInfo >= 0, arg = 0x0, val = 98, descrip = 0x7f2db8841700 "Print build options", >argDescrip = 0x0}, {longName = 0x7f2db8841714 "port", shortName = 112 'p', >argInfo = 1, arg = 0x7fff9b14acd0, val = 0, descrip = 0x7f2db8841719 "Listen >on the specified ports", argDescrip = 0x0}, {longName = 0x7f2db8841737 >"profiling-level", shortName = 80 'P', argInfo = 1, arg = 0x7fff9b14acc8, val >= 0, descrip = 0x7f2db8841747 "Set profiling level", argDescrip = >0x7f2db884175b "PROFILE_LEVEL"}, {longName = 0x0, shortName = 0 '\000', >argInfo = 4, arg = 0x7f2db6a01880, val = 0, descrip = 0x7f2db8841769 "Common >samba options:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', >argInfo = 4, arg = 0x7f2db6a01040, val = 0, descrip = 0x7f2db8841780 >"Build-time configuration overrides:", argDescrip = 0x0}, {longName = 0x0, >shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, >argDescrip = 0x0}} > parent = 0x7f2db94c7ef0 > frame = 0x7f2db94be1a0 > status = {v = 0} > ev_ctx = 0x7f2db94c20e0 > msg_ctx = 0x7f2db94c21d0 > server_id = {pid = 11442, task_id = 0, vnn = 4294967295, unique_id = >15370683216064985195} > se = 0x7f2db94c8250 > np_dir = 0x7f2db94d2e00 "@\026O\271-\177" > smbd_shim_fns = {cancel_pending_lock_requests_by_fid = 0x7f2db7955937 ><smbd_cancel_pending_lock_requests_by_fid>, send_stat_cache_delete_message = >0x7f2db795f827 <smbd_send_stat_cache_delete_message>, change_to_root_user = >0x7f2db7940694 <smbd_change_to_root_user>, contend_level2_oplocks_begin = >0x7f2db79c7d99 <smbd_contend_level2_oplocks_begin>, contend_level2_oplocks_end >= 0x7f2db79c7e0c <smbd_contend_level2_oplocks_end>, become_root = >0x7f2db79409cf <smbd_become_root>, unbecome_root = 0x7f2db79409f7 ><smbd_unbecome_root>, exit_server = 0x7f2db79bdb21 <smbd_exit_server>, >exit_server_cleanly = 0x7f2db79bdb3e <smbd_exit_server_cleanly>} > __FUNCTION__ = "main" >A debugging session is active. > > Inferior 1 [process 91892] will be detached. > >Quit anyway? (y or n) [answered Y; input not from terminal]
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 10250
:
9374
| 9375 |
9376
|
9377
|
9421
|
9449
|
9450