The Samba-Bugzilla – Attachment 9638 Details for
Bug 10415
*** glibc detected *** /usr/sbin/smbd: free(): invalid next size (fast)
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
full backtrace with debugging symbols
core.smbd.22582.hoofd-server.1391523537.txt (text/plain), 14.69 KB, created by
Sander Plas
on 2014-02-04 16:46:30 UTC
(
hide
)
Description:
full backtrace with debugging symbols
Filename:
MIME Type:
Creator:
Sander Plas
Created:
2014-02-04 16:46:30 UTC
Size:
14.69 KB
patch
obsolete
>#0 0x00007f59f4215425 in __GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 > resultvar = 0 > pid = <optimized out> > selftid = 22582 >#1 0x00007f59f4218b8b in __GI_abort () at abort.c:91 > save_stage = 2 > act = {__sigaction_handler = {sa_handler = 0, sa_sigaction = 0}, sa_mask = {__val = {0, 140024324447304, 140024380070368, 0, 0, 0, 0, 4294967295, 0, 0, 3000112, 2601408, 0, > 140737077127536, 2, 140024347004928}}, sa_flags = -145811596, sa_restorer = 0x1} > sigs = {__val = {32, 0 <repeats 15 times>}} >#2 0x00007f59f579f8ae in dump_core () at ../source3/lib/dumpcore.c:336 > called = true > __FUNCTION__ = "dump_core" >#3 0x00007f59f578a5a5 in smb_panic_s3 (why=<optimized out>) at ../source3/lib/util.c:808 > cmd = <optimized out> > result = <optimized out> > __FUNCTION__ = "smb_panic_s3" >#4 0x00007f59f70aab3a in smb_panic (why=0x7f59f70b8365 "internal error") at ../lib/util/fault.c:159 >No locals. >#5 0x00007f59f70aae7b in fault_report (sig=6) at ../lib/util/fault.c:77 > counter = 1 >#6 sig_fault (sig=6) at ../lib/util/fault.c:88 >No locals. >#7 <signal handler called> >No symbol table info available. >#8 0x00007f59f4215425 in __GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 > resultvar = 0 > pid = <optimized out> > selftid = 22582 >#9 0x00007f59f4218b8b in __GI_abort () at abort.c:91 > save_stage = 2 > act = {__sigaction_handler = {sa_handler = 0x3, sa_sigaction = 0x3}, sa_mask = {__val = {4, 140737077139471, 14, 140024325968631, 1, 140024325972875, 3, 140737077127340, 4, > 140024325968578, 1, 140024325977575, 3, 140737077127316, 12, 140024325977579}}, sa_flags = 2, sa_restorer = 0x7f59f435b5eb} > sigs = {__val = {32, 0 <repeats 15 times>}} >#10 0x00007f59f425339e in __libc_message (do_abort=2, fmt=0x7f59f435d748 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:201 > ap = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fffe77d3210, reg_save_area = 0x7fffe77d3120}} > ap_copy = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fffe77d3210, reg_save_area = 0x7fffe77d3120}} > fd = 2 > on_2 = <optimized out> > list = <optimized out> > nlist = <optimized out> > cp = <optimized out> > written = <optimized out> >#11 0x00007f59f425db96 in malloc_printerr (action=3, str=0x7f59f435d910 "free(): invalid next size (fast)", ptr=<optimized out>) at malloc.c:5039 > buf = "00007f59f94fe030" > cp = <optimized out> >#12 0x00007f59f6799cd6 in _talloc_free_internal (ptr=0x7f59f94fe090, location=0x7f59f6de7688 "../source3/smbd/smb2_server.c:3070") at ../lib/talloc/talloc.c:962 > tc = 0x7f59f94fe030 >#13 0x00007f59f679666d in _talloc_free_children_internal (location=0x7f59f6de7688 "../source3/smbd/smb2_server.c:3070", ptr=0x7f59f9319470, tc=0x7f59f9319410) > at ../lib/talloc/talloc.c:1374 > child = 0x7f59f94fe090 > new_parent = 0x7f59f8ea80a0 >#14 _talloc_free_internal (location=0x7f59f6de7688 "../source3/smbd/smb2_server.c:3070", ptr=0x7f59f9319470) at ../lib/talloc/talloc.c:904 >No locals. >#15 _talloc_free (ptr=0x7f59f9319470, location=0x7f59f6de7688 "../source3/smbd/smb2_server.c:3070") at ../lib/talloc/talloc.c:1489 >No locals. >#16 0x00007f59f6cc7459 in smbd_smb2_flush_send_queue (sconn=0x7f59f9efdcb0) at ../source3/smbd/smb2_server.c:3070 > e = 0x7f59f9319488 > ret = 0 > err = <optimized out> > retry = false >#17 smbd_smb2_io_handler (sconn=0x7f59f9efdcb0, fde_flags=<optimized out>) at ../source3/smbd/smb2_server.c:3089 > state = 0x7f59f9efde08 > req = 0x0 > min_recvfile_size = 4294967295 > ret = <optimized out> > err = <optimized out> > retry = <optimized out> > status = <optimized out> > now = <optimized out> > __FUNCTION__ = "smbd_smb2_io_handler" >#18 0x00007f59f6cc8ccf in smbd_smb2_request_reply (req=0x7f59f9319470) at ../source3/smbd/smb2_server.c:2444 > sconn = 0x7f59f9efdcb0 > conn = 0x7f59f9cb0f30 > outhdr = <optimized out> > status = <optimized out> > first_idx = 1 > firsttf = <optimized out> > outdyn = <optimized out> >#19 smbd_smb2_request_done_ex (req=0x7f59f9319470, status=..., body=..., dyn=<optimized out>, location=<optimized out>) at ../source3/smbd/smb2_server.c:2584 > outhdr = <optimized out> > outbody_v = <optimized out> > outdyn_v = 0x7f59f93197b0 > next_command_ofs = <optimized out> > __FUNCTION__ = "smbd_smb2_request_done_ex" >#20 0x00007f59f6cd4da8 in smbd_smb2_request_ioctl_done (subreq=0x0) at ../source3/smbd/smb2_ioctl.c:357 > req = 0x7f59f9319470 > inbody = <optimized out> > outbody = {data = 0x7f59f9319ce0 "1", length = <optimized out>} > outdyn = {data = 0x7f59f94fe090 "E", length = 24} > in_ctl_code = <optimized out> > out_input_offset = 112 > out_output_offset = 112 > out_output_buffer = {data = 0x7f59f94fe090 "E", length = 24} > status = {v = 0} > error = <optimized out> > disconnect = <optimized out> > __FUNCTION__ = "smbd_smb2_request_ioctl_done" >#21 0x00007f59f69a383e in _tevent_req_notify_callback (req=0x7f59f93198d0, location=<optimized out>) at ../lib/tevent/tevent_req.c:101 >No locals. >#22 0x00007f59f6cc8d27 in smbd_smb2_request_pending_queue (req=0x7f59f9319470, subreq=0x7f59f93198d0, defer_time=1000) at ../source3/smbd/smb2_server.c:1263 > status = <optimized out> > defer_endtime = {tv_sec = 140024409593280, tv_usec = -2538480328473264896} > outhdr = 0x0 > flags = <optimized out> >#23 0x00007f59f6cd5630 in smbd_smb2_request_process_ioctl (req=0x7f59f9319470) at ../source3/smbd/smb2_ioctl.c:228 > status = <optimized out> > inbody = <optimized out> > min_buffer_offset = <optimized out> > max_buffer_offset = <optimized out> > min_output_offset = <optimized out> > allowed_length_in = <optimized out> > allowed_length_out = <optimized out> > in_fsp = 0x0 > in_input_offset = <optimized out> > in_input_length = <optimized out> > in_input_buffer = {data = 0x7f59f9319638 "\177", length = 34} > in_output_offset = <optimized out> > in_output_length = <optimized out> > in_output_buffer = <optimized out> > data_length_in = <optimized out> > data_length_out = <optimized out> > data_length_tmp = <optimized out> > data_length_max = <optimized out> > subreq = 0x7f59f93198d0 >#24 0x00007f59f6cc6d2d in smbd_smb2_request_dispatch (req=0x7f59f9319470) at ../source3/smbd/smb2_server.c:2194 > conn = 0x7f59f9cb0f30 > call = <optimized out> > intf_v = <optimized out> > inhdr = <optimized out> > opcode = 11 > flags = <optimized out> > status = <optimized out> > session_status = <optimized out> > allowed_flags = <optimized out> > return_value = <optimized out> > x = 0x7f59f9e01870 > signing_required = <optimized out> > encryption_required = false > __FUNCTION__ = "smbd_smb2_request_dispatch" >#25 0x00007f59f6cc79e8 in smbd_smb2_io_handler (sconn=0x7f59f9efdcb0, fde_flags=<optimized out>) at ../source3/smbd/smb2_server.c:3253 > state = 0x7f59f9efde08 > req = 0x7f59f9319470 > min_recvfile_size = 4294967295 > ret = <optimized out> > err = <optimized out> > retry = false > status = <optimized out> > now = <optimized out> > __FUNCTION__ = "smbd_smb2_io_handler" >#26 0x00007f59f6cc7ae0 in smbd_smb2_connection_handler (ev=<optimized out>, fde=<optimized out>, flags=1, private_data=<optimized out>) at ../source3/smbd/smb2_server.c:3291 > sconn = 0x7f59f9efdcb0 > status = <optimized out> >#27 0x00007f59f57a7cb9 in run_events_poll (ev=0x7f59f8eacab0, pollrtn=<optimized out>, pfds=0x7f59f97d5090, num_pfds=4) at ../source3/lib/events.c:257 > pfd = <optimized out> > flags = <optimized out> > state = <optimized out> > pollfd_idx = 0x7f59f8eacc40 > fde = 0x7f59f9a75e30 > __FUNCTION__ = "run_events_poll" >#28 0x00007f59f57a7e19 in s3_event_loop_once (ev=0x7f59f8eacab0, location=<optimized out>) at ../source3/lib/events.c:326 > state = 0x7f59f8eaae70 > timeout = 46128 > num_pfds = 4 > ret = 1 > poll_errno = 0 >#29 0x00007f59f69a29bb in _tevent_loop_once (ev=0x7f59f8eacab0, location=0x7f59f6ddd660 "../source3/smbd/process.c:3626") at ../lib/tevent/tevent.c:530 > ret = <optimized out> > nesting_stack_ptr = 0x0 >#30 0x00007f59f6cb368e in smbd_process (ev_ctx=0x7f59f8eacab0, msg_ctx=<optimized out>, sock_fd=<optimized out>, interactive=<optimized out>) at ../source3/smbd/process.c:3626 > frame = 0x7f59f9e8e430 > conn = <optimized out> > sconn = <optimized out> > ss = {ss_family = 2, __ss_align = 0, > __ss_padding = '\000' <repeats 56 times>, " vp\367Y\177\000\000\200\302\352\370\001\000\000\000\300T\353\370Y\177\000\000@C\353\370Y\177\000\000\265\240p\367Y\177", '\000' <repeats 14 times>, "\001\000\000"} > sa = 0x7fffe77d3890 > sa_socklen = <optimized out> > local_address = 0x7f59fa06f000 > remote_address = 0x7f59f945d760 > locaddr = <optimized out> > remaddr = <optimized out> > rhost = 0x0 > ret = <optimized out> > __FUNCTION__ = "smbd_process" >#31 0x00007f59f77107c1 in smbd_accept_connection (ev=0x7f59f8eacab0, fde=<optimized out>, flags=<optimized out>, private_data=<optimized out>) at ../source3/smbd/server.c:621 > status = {v = 0} > s = 0x0 > msg_ctx = 0x7f59f8eacba0 > addr = {ss_family = 2, __ss_align = 0, > __ss_padding = "\240:}\347\377\177\000\000\033\372\177\347\377\177\000\000p\256\352\370Y\177\000\000\006\000\000\000\000\000\000\000*\000\000\000\000\000\000\000e\032\n\367Y\177\000\000\065\000\000\000\000\000\000\000\214$\n\367Y\177\000\000\000\000\000\000\000\000\000\000 '\330\371Y\177\000\000\065\000\000\000\000\000\000\000\027\300\n\000\000\000\000\000\065\000\000\000\000\000\000\000p\256\352\370Y\177\000"} > in_addrlen = 16 > fd = 43 > pid = 0 > unique_id = 1524056098375570295 > __FUNCTION__ = "smbd_accept_connection" >#32 0x00007f59f57a7cb9 in run_events_poll (ev=0x7f59f8eacab0, pollrtn=<optimized out>, pfds=0x7f59f97d5090, num_pfds=6) at ../source3/lib/events.c:257 > pfd = <optimized out> > flags = <optimized out> > state = <optimized out> > pollfd_idx = 0x7f59f8eacc40 > fde = 0x7f59f96b1210 > __FUNCTION__ = "run_events_poll" >#33 0x00007f59f57a7e19 in s3_event_loop_once (ev=0x7f59f8eacab0, location=<optimized out>) at ../source3/lib/events.c:326 > state = 0x7f59f8eaae70 > timeout = 53705 > num_pfds = 6 > ret = 1 > poll_errno = 0 >#34 0x00007f59f69a29bb in _tevent_loop_once (ev=0x7f59f8eacab0, location=0x7f59f7714b62 "../source3/smbd/server.c:943") at ../lib/tevent/tevent.c:530 > ret = <optimized out> > nesting_stack_ptr = 0x0 >#35 0x00007f59f771260d in smbd_parent_loop (parent=<optimized out>, ev_ctx=0x7f59f8eacab0) at ../source3/smbd/server.c:943 > ret = <optimized out> > frame = 0x7f59f8eadc70 >#36 main (argc=<optimized out>, argv=<optimized out>) at ../source3/smbd/server.c:1577 > is_daemon = <optimized out> > interactive = <optimized out> > Fork = false > no_process_group = 80 > log_stdout = 160 > ports = 0x0 > profile_level = 0x0 > opt = <optimized out> > pc = <optimized out> > print_build_options = <optimized out> > long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7f59f49b01a0, val = 0, descrip = 0x7f59f77144a9 "Help options:", argDescrip = 0x0}, { > longName = 0x7f59f77144b7 "daemon", shortName = 68 'D', argInfo = 0, arg = 0x0, val = 1000, descrip = 0x7f59f77144be "Become a daemon (default)", argDescrip = 0x0}, { > longName = 0x7f59f77144d8 "interactive", shortName = 105 'i', argInfo = 0, arg = 0x0, val = 1001, descrip = 0x7f59f7714fa8 "Run interactive (not a daemon)", > argDescrip = 0x0}, {longName = 0x7f59f77144e4 "foreground", shortName = 70 'F', argInfo = 0, arg = 0x0, val = 1002, > descrip = 0x7f59f7714fc8 "Run daemon in foreground (for daemontools, etc.)", argDescrip = 0x0}, {longName = 0x7f59f77144ef "no-process-group", shortName = 0 '\000', > argInfo = 0, arg = 0x0, val = 1003, descrip = 0x7f59f7715000 "Don't create a new process group", argDescrip = 0x0}, {longName = 0x7f59f7714500 "log-stdout", > shortName = 83 'S', argInfo = 0, arg = 0x0, val = 1004, descrip = 0x7f59f771450b "Log to stdout", argDescrip = 0x0}, {longName = 0x7f59f7714519 "build-options", > shortName = 98 'b', argInfo = 0, arg = 0x0, val = 98, descrip = 0x7f59f7714527 "Print build options", argDescrip = 0x0}, {longName = 0x7f59f771453b "port", > shortName = 112 'p', argInfo = 1, arg = 0x7fffe77d3f90, val = 0, descrip = 0x7f59f7714540 "Listen on the specified ports", argDescrip = 0x0}, { > longName = 0x7f59f771455e "profiling-level", shortName = 80 'P', argInfo = 1, arg = 0x7fffe77d3f98, val = 0, descrip = 0x7f59f771456e "Set profiling level", > argDescrip = 0x7f59f7714582 "PROFILE_LEVEL"}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7f59f5e186a0, val = 0, > descrip = 0x7f59f7714590 "Common samba options:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7f59f5e17ae0, val = 0, > descrip = 0x7f59f7715028 "Build-time configuration overrides:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, > argDescrip = 0x0}} > parent = <optimized out> > frame = <optimized out> > status = <optimized out> > ev_ctx = 0x7f59f8eacab0 > msg_ctx = <optimized out> > server_id = {pid = 22532, task_id = 0, vnn = 4294967295, unique_id = 7336055648759535510} > se = <optimized out> > np_dir = <optimized out> > smbd_shim_fns = {cancel_pending_lock_requests_by_fid = 0x7f59f6c9cd8b <smbd_cancel_pending_lock_requests_by_fid>, > send_stat_cache_delete_message = 0x7f59f6ca2ca1 <smbd_send_stat_cache_delete_message>, change_to_root_user = 0x7f59f6c8bf4d <smbd_change_to_root_user>, > contend_level2_oplocks_begin = 0x7f59f6cea875 <smbd_contend_level2_oplocks_begin>, contend_level2_oplocks_end = 0x7f59f6cea9fa <smbd_contend_level2_oplocks_end>, > become_root = 0x7f59f6c8c03a <smbd_become_root>, unbecome_root = 0x7f59f6c8c062 <smbd_unbecome_root>, exit_server = 0x7f59f6ce395b <smbd_exit_server>, > exit_server_cleanly = 0x7f59f6ce396c <smbd_exit_server_cleanly>} > __FUNCTION__ = "main"
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 10415
:
9636
|
9637
| 9638 |
9645
|
9646
|
9656
|
9658
|
9659
|
9660
|
9661
|
9668
|
9669
|
9671
|
9672