#2325 segfault in sssd_be
Closed: Duplicate None Opened 10 years ago by brianmurrell.

I'm seeing the following segfault in sssd_be in version 1.9.2-129.el6_5.4:

(gdb) thread apply all bt full

Thread 1 (Thread 0x7fa5213cc700 (LWP 16330)):
#0  0x000000000040f68c in be_host_handler (message=<value optimized out>, conn=0x256d0c0)
    at src/providers/data_provider_be.c:1847
        req = <value optimized out>
        be_req = 0x258ca10
        becli = 0x2570cd0
        reply = 0x259fe50
        dbus_error = {name = 0x0, message = 0x0, dummy1 = 1, dummy2 = 1, dummy3 = 1, dummy4 = 1, dummy5 = 1, 
          padding1 = 0x374062800e}
        dbret = <value optimized out>
        user_data = <value optimized out>
        flags = 0
        filter = 0x35b44a8 "name=ssh-1.example.com:ssh-1"
        ret = <value optimized out>
        err_maj = 0
        err_min = 32767
        err_msg = 0x72 <Address 0x72 out of bounds>
        __FUNCTION__ = "be_host_handler"
#1  0x000000000046059f in sbus_message_handler (dbus_conn=<value optimized out>, message=0x2578f60, 
    user_data=<value optimized out>) at src/sbus/sssd_dbus_connection.c:430
        intf_p = 0x256cb30
        method = 0x259b1f8 "hostHandler"
        path = <value optimized out>
        msg_interface = <value optimized out>
        reply = 0x0
        i = <value optimized out>
        ret = <value optimized out>
        found = 1
        __FUNCTION__ = "sbus_message_handler"
#2  0x000000374061cefe in _dbus_object_tree_dispatch_and_unlock (tree=0x256d050, message=0x2578f60)
    at dbus-object-tree.c:856
        message_function = 0x460310 <sbus_message_handler>
        user_data = <value optimized out>
        next = 0x0
        path = 0x253eb20
        exact_match = 0
        list = 0x2577dc0
        link = <value optimized out>
        result = DBUS_HANDLER_RESULT_NOT_YET_HANDLED
        subtree = <value optimized out>
#3  0x0000003740610b4c in dbus_connection_dispatch (connection=0x256c9d0) at dbus-connection.c:4492
        message = 0x2578f60
        link = <value optimized out>
        filter_list_copy = 0x0
        message_link = 0x2577e80
        result = <value optimized out>
        pending = <value optimized out>
        reply_serial = <value optimized out>
        status = <value optimized out>
        __FUNCTION__ = "dbus_connection_dispatch"
#4  0x00000000004628be in sbus_dispatch (ev=0x25385b0, te=<value optimized out>, tv=..., data=<value optimized out>)
    at src/sbus/sssd_dbus_connection.c:104
        new_event = <value optimized out>
        conn = 0x256d0c0
        dbus_conn = 0x256c9d0
        ret = <value optimized out>
        __FUNCTION__ = "sbus_dispatch"
#5  0x0000003743207c91 in tevent_common_loop_timer_delay (ev=0x25385b0) at ../tevent_timed.c:341
        current_time = {tv_sec = 1398803041, tv_usec = 943537}
        te = 0x35b0010
#6  0x0000003743208cbb in epoll_event_loop_once (ev=0x25385b0, location=<value optimized out>) at ../tevent_epoll.c:916
        epoll_ev = 0x25387c0
        tval = {tv_sec = 263, tv_usec = 71635}
        panic_triggered = false
#7  0x00000037432072e6 in std_event_loop_once (ev=0x25385b0, location=0x4828d3 "src/util/server.c:601")
    at ../tevent_standard.c:112
        glue_ptr = <value optimized out>
        glue = 0x2538690
        ret = <value optimized out>
#8  0x000000374320349d in _tevent_loop_once (ev=0x25385b0, location=0x4828d3 "src/util/server.c:601") at ../tevent.c:530
        ret = <value optimized out>
        nesting_stack_ptr = 0x0
#9  0x000000374320351b in tevent_common_loop_wait (ev=0x25385b0, location=0x4828d3 "src/util/server.c:601")
    at ../tevent.c:634
        ret = <value optimized out>
#10 0x0000003743207256 in std_event_loop_wait (ev=0x25385b0, location=0x4828d3 "src/util/server.c:601")
    at ../tevent_standard.c:138
        glue_ptr = <value optimized out>
        glue = 0x2538690
        ret = <value optimized out>
#11 0x0000000000466c33 in server_loop (main_ctx=0x2539920) at src/util/server.c:601
No locals.
#12 0x000000000041a526 in main (argc=<value optimized out>, argv=<value optimized out>)
    at src/providers/data_provider_be.c:2755
        opt = <value optimized out>
        pc = <value optimized out>
        be_domain = 0x2537400 "example.com"
        srv_name = <value optimized out>
        main_ctx = 0x2539920
        confdb_path = <value optimized out>
        ret = <value optimized out>
        long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x68c7c0, val = 0, 
            descrip = 0x4755ef "Help options:", argDescrip = 0x0}, {longName = 0x4755fd "debug-level", shortName = 100 'd', 
            argInfo = 2, arg = 0x68c8a0, val = 0, descrip = 0x4755ce "Debug level", argDescrip = 0x0}, {
            longName = 0x475609 "debug-to-files", shortName = 102 'f', argInfo = 0, arg = 0x68c8a4, val = 0, 
            descrip = 0x476be0 "Send the debug output to files instead of stderr", argDescrip = 0x0}, {
            longName = 0x475618 "debug-timestamps", shortName = 0 '\000', argInfo = 2, arg = 0x68c7a8, val = 0, 
            descrip = 0x4755da "Add debug timestamps", argDescrip = 0x0}, {longName = 0x475629 "debug-microseconds", 
            shortName = 0 '\000', argInfo = 2, arg = 0x68c7ac, val = 0, 
            descrip = 0x476c18 "Show timestamps with microseconds", argDescrip = 0x0}, {longName = 0x4778dc "domain", 
            shortName = 0 '\000', argInfo = 1, arg = 0x7fff46cf4e78, val = 0, 
            descrip = 0x476c40 "Domain of the information provider (mandatory)", argDescrip = 0x0}, {longName = 0x0, 
            shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, argDescrip = 0x0}}
        __FUNCTION__ = "main"

I would say it is a duplicate of ticket #1751.
The problem was fixed with commit 3082504, but this patch is not available in 1.9 branch

cc: => lslebodn@redhat.com

Replying to [comment:2 lslebodn]:

I would say it is a duplicate of ticket #1751.
The problem was fixed with commit 3082504, but this patch is not available in 1.9 branch

Should it get applied since this is an outright segfault?

I think we should back port patch to 1.9 branch at least in upstream.

This is a duplicate of #1751

resolution: => duplicate
status: new => closed

Metadata Update from @brianmurrell:
- Issue set to the milestone: NEEDS_TRIAGE

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3367

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata