[Samba] RE: RE: winbindd panic daemon dies

ww m-pubsyssamba pubsyssamba at bbc.co.uk
Wed Feb 4 16:23:24 GMT 2004


Hi Samba developer people,

	I still have a problem were winbindd panics every time I run it. I'd hoped this might get fixed as newer releases of Samba came out, but I'm now running 3.0.2pre1 and still the same problem. I want to deploy Samba on Solaris, but was unable to successfully get samba to compile with dmalloc support, so I've had to install onto RedHat 8 and use valgrind instead. Please can someone take a look at this error, let me know if any additional infromation is required,

	thanks in advance,  Andy Smith.


On Fri, 2003-11-21 at 21:27, ww m-pubsyssamba wrote: > 
Hi, please find attatched the back trace from my winbindd (samba 3.0.0) panic, 
Bugger - it's another malloc() related bug. That means that some free() call - sometime before this one, was misused. If you were running it on linux, I would suggest running winbind under valgrind, but there might be some other ways to help track this down: Are there any debugging malloc libraries for Solaris? Is it reasonable to try and setup a linux box in a matching setup? 
Andrew Bartlett 


[root at localhost valgrind-2.1.0]# valgrind --skin=memcheck winbindd -iY
==25463== Memcheck, a memory error detector for x86-linux.
==25463== Copyright (C) 2002-2003, and GNU GPL'd, by Julian Seward.
==25463== Using valgrind-2.1.0, a program supervision framework for x86-linux.
==25463== Copyright (C) 2000-2003, and GNU GPL'd, by Julian Seward.
==25463== Estimated CPU clock rate is 1797 MHz
==25463== For more details, rerun with: -v
==25463== 
winbindd version 3.0.2rc1 started.
Copyright The Samba Team 2000-2004
Added domain WORLDWIDE worldwide.bbc.co.uk S-1-5-21-842925246-920026266-1801674531
krb5_cc_get_principal failed (No credentials cache found)
krb5_get_credentials failed for bbcdc1106$@CORE.BBC.CO.UK (Cannot find KDC for requested realm)
spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
Added domain CORE core.bbc.co.uk S-1-5-21-1645522239-1647877149-1801674531
Added domain BBCLONDONWW  S-1-5-21-450833596-1891573605-709122288
Added domain BBCWWMAILRES  S-1-5-21-770521979-862410884-1228766249
Added domain BBCUKWBS  S-1-5-21-710036845-1494902100-9522986
krb5_get_credentials failed for bbcdev1002$@DSD-PILOT.CORE.BBC.CO.UK (Cannot find KDC for requested realm)
spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
Added domain DSD-PILOT dsd-pilot.core.bbc.co.uk S-1-5-21-790525478-616249376-1177238915
krb5_get_credentials failed for bbcdev1002$@DSD-PILOT.CORE.BBC.CO.UK (Cannot find KDC for requested realm)
krb5_get_credentials failed for bbcdev1002$@DSD-PILOT.CORE.BBC.CO.UK (Cannot find KDC for requested realm)
ads_connect for domain DSD-PILOT failed: Cannot find KDC for requested realm
krb5_get_credentials failed for bbcdcp002$@HQ.CORE.BBC.CO.UK (Cannot find KDC for requested realm)
spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
Added domain HQ hq.core.bbc.co.uk S-1-5-21-1957994488-329068152-682003330
krb5_get_credentials failed for bbcdcp002$@HQ.CORE.BBC.CO.UK (Cannot find KDC for requested realm)
krb5_get_credentials failed for bbcdcp002$@HQ.CORE.BBC.CO.UK (Cannot find KDC for requested realm)
ads_connect for domain HQ failed: Cannot find KDC for requested realm
==25463== Invalid write of size 4
==25463==    at 0x8110A0D: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463==    by 0x81114DF: get_sorted_dc_list (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 4
==25463==    at 0x8110A12: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463==    by 0x81114DF: get_sorted_dc_list (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E54 is 4 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x8110A16: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463==    by 0x81114DF: get_sorted_dc_list (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x810F423: (within /usr/sbin/winbindd)
==25463==    by 0x8111076: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463==    by 0x81114DF: get_sorted_dc_list (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x810F3F3: (within /usr/sbin/winbindd)
==25463==    by 0x8111076: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463==    by 0x81114DF: get_sorted_dc_list (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x810F426: (within /usr/sbin/winbindd)
==25463==    by 0x8111076: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463==    by 0x81114DF: get_sorted_dc_list (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x810F450: (within /usr/sbin/winbindd)
==25463==    by 0x8111076: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463==    by 0x81114DF: get_sorted_dc_list (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x80C68CF: ipstr_list_add (in /usr/sbin/winbindd)
==25463==    by 0x80C69AE: ipstr_list_make (in /usr/sbin/winbindd)
==25463==    by 0x810BFF2: namecache_store (in /usr/sbin/winbindd)
==25463==    by 0x8110ECE: (within /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x80C68D9: ipstr_list_add (in /usr/sbin/winbindd)
==25463==    by 0x80C69AE: ipstr_list_make (in /usr/sbin/winbindd)
==25463==    by 0x810BFF2: namecache_store (in /usr/sbin/winbindd)
==25463==    by 0x8110ECE: (within /usr/sbin/winbindd)
==25463==  Address 0x41D28E54 is 4 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 1
==25463==    at 0x810E624: matching_quad_bits (in /usr/sbin/winbindd)
==25463==    by 0x810F28E: ip_compare (in /usr/sbin/winbindd)
==25463==    by 0x810F31D: (within /usr/sbin/winbindd)
==25463==    by 0x402EDF2F: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 1
==25463==    at 0x810E637: matching_quad_bits (in /usr/sbin/winbindd)
==25463==    by 0x810F28E: ip_compare (in /usr/sbin/winbindd)
==25463==    by 0x810F31D: (within /usr/sbin/winbindd)
==25463==    by 0x402EDF2F: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E51 is 1 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 1
==25463==    at 0x810E624: matching_quad_bits (in /usr/sbin/winbindd)
==25463==    by 0x810F29F: ip_compare (in /usr/sbin/winbindd)
==25463==    by 0x810F31D: (within /usr/sbin/winbindd)
==25463==    by 0x402EDF2F: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E58 is 8 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 1
==25463==    at 0x810E637: matching_quad_bits (in /usr/sbin/winbindd)
==25463==    by 0x810F29F: ip_compare (in /usr/sbin/winbindd)
==25463==    by 0x810F31D: (within /usr/sbin/winbindd)
==25463==    by 0x402EDF2F: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E59 is 9 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x810F2B9: ip_compare (in /usr/sbin/winbindd)
==25463==    by 0x810F31D: (within /usr/sbin/winbindd)
==25463==    by 0x402EDF2F: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x810F2CE: ip_compare (in /usr/sbin/winbindd)
==25463==    by 0x810F31D: (within /usr/sbin/winbindd)
==25463==    by 0x402EDF2F: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E58 is 8 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x810F322: (within /usr/sbin/winbindd)
==25463==    by 0x402EDF2F: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E54 is 4 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x810F32A: (within /usr/sbin/winbindd)
==25463==    by 0x402EDF2F: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E5C is 12 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x4033FB3C: __GI___mempcpy (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A84: memcpy (mac_replace_strmem.c:269)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A8A: memcpy (mac_replace_strmem.c:270)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E51 is 1 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A90: memcpy (mac_replace_strmem.c:271)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E52 is 2 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A96: memcpy (mac_replace_strmem.c:272)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E53 is 3 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x4033FB3C: __GI___mempcpy (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x810F3B0: sort_ip_list2 (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A84: memcpy (mac_replace_strmem.c:269)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A8A: memcpy (mac_replace_strmem.c:270)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E51 is 1 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A90: memcpy (mac_replace_strmem.c:271)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E52 is 2 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A96: memcpy (mac_replace_strmem.c:272)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EDEBA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E53 is 3 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x810F2CE: ip_compare (in /usr/sbin/winbindd)
==25463==    by 0x810F31D: (within /usr/sbin/winbindd)
==25463==    by 0x402EDF2F: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid read of size 4
==25463==    at 0x4033FB3C: __GI___mempcpy (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x810F3B0: sort_ip_list2 (in /usr/sbin/winbindd)
==25463==    by 0x8111510: get_sorted_dc_list (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A84: memcpy (mac_replace_strmem.c:269)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x810F3B0: sort_ip_list2 (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E50 is 0 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A8A: memcpy (mac_replace_strmem.c:270)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x810F3B0: sort_ip_list2 (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E51 is 1 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A90: memcpy (mac_replace_strmem.c:271)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x810F3B0: sort_ip_list2 (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E52 is 2 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
==25463== 
==25463== Invalid write of size 1
==25463==    at 0x40022A96: memcpy (mac_replace_strmem.c:272)
==25463==    by 0x402EDEFA: msort_with_tmp (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x402EE15F: __GI_qsort (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x810F3B0: sort_ip_list2 (in /usr/sbin/winbindd)
==25463==  Address 0x41D28E53 is 3 bytes after a block of size 192 alloc'd
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x8110969: (within /usr/sbin/winbindd)
==25463==    by 0x81110F6: (within /usr/sbin/winbindd)
==25463==    by 0x81117D7: get_dc_list (in /usr/sbin/winbindd)
krb5_get_credentials failed for bbcdc1113$@INTERNATIONAL.CORE.BBC.CO.UK (Cannot find KDC for requested realm)
spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
Added domain INTERNATIONAL international.core.bbc.co.uk S-1-5-21-1060284298-842925246-725345543
krb5_get_credentials failed for bbcdc1113$@INTERNATIONAL.CORE.BBC.CO.UK (Cannot find KDC for requested realm)
krb5_get_credentials failed for bbcdc1113$@INTERNATIONAL.CORE.BBC.CO.UK (Cannot find KDC for requested realm)
ads_connect for domain INTERNATIONAL failed: Cannot find KDC for requested realm
--25463-- INTERNAL ERROR: Valgrind received a signal 11 (SIGSEGV) - exiting
--25463-- si_code=1 Fault EIP: 0x4016B3C3; Faulting address: 0x29086412

valgrind: the `impossible' happened:
   Killed by fatal signal
Basic block ctr is approximately 20750000
==25463==    at 0x4016ED68: vgPlain_core_panic (vg_mylibc.c:1121)
==25463==    by 0x4016ED67: panic (vg_mylibc.c:1117)
==25463==    by 0x4016ED8D: vgPlain_core_panic (vg_mylibc.c:1122)
==25463==    by 0x40175415: vg_sync_signalhandler (vg_signals.c:1674)

sched status:

Thread 1: status = Runnable, associated_mx = 0x0, associated_cv = 0x0
==25463==    at 0x4002986F: malloc (vg_replace_malloc.c:160)
==25463==    by 0x4032DE5B: _IO_vasprintf (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x4031601C: __asprintf_internal (in /lib/i686/libc-2.3.2.so)
==25463==    by 0x810BF4E: (within /usr/sbin/winbindd)


Note: see also the FAQ.txt in the source distribution.
It contains workarounds to several common problems.

If that doesn't help, please report this bug to: valgrind.kde.org

In the bug report, send all the above text, the valgrind
version, and what Linux distro you are using.  Thanks.

BBCi at http://www.bbc.co.uk/

This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received.
Further communication will signify your consent to this.


More information about the samba mailing list