In smbd there's a small gab between TALLOC_FREE(frame); before we call smbd_parent_loop() where we don't have a valid talloc stackframe. smbd_parent_loop() calls talloc_stackframe() only within the while(1) loop. As DEBUG(2,("waiting for connections")) uses talloc_tos() to construct the time header for the debug message we crash on some systems.
Created attachment 5499 [details] Patch for v3-5
Comment on attachment 5499 [details] Patch for v3-5 ack
assign bug to karolin for incusion in 3.5.2
Pushed to v3-5-test. Closing out bug report. Metze, thanks a lot for tracking this one down! :-)