string overflow in safe_strcpy

[wulu]

>ok, suggest doing a gdb on the core file,
>followed by a "where" to get a stack trace.

Found the reason for the smbd failure - it´s IE5 - what else ..
I saved some web pages via IE5, which created file/dir-names like:
    search;cat=search;cat=entertainment;cat=music;ord=741318556-Dateien/

    search;cat=search;cat=entertainment;cat=music;ord=741318556.htm
after deleting those files everything works fine again.

the following happends under dose when trying to recreate one of those
files
 WIN W:\_unburned\cd18\Metallica - Garage Inc\misc\Metallica - Garage
Inc_
[Disc2]-Dateien>
 mkdir "search;cat=search;cat=entertainment;cat=music;ord=741318556.htm"

 Die Sitzung wurde abgebrochen.  <-- 'session closed '

 WIN W:\_unburned\cd18\Metallica - Garage Inc\misc\Metallica - Garage
Inc_
[Disc2]-Dateien>
 mkdir
\"search;cat=search;cat=entertainment;cat=music;ord=741318556.htm"
<-- 'this one works fine'


Thanks for your response

Ralf
-----------------------------------

#gdb --exec=/usr/local/samba/bin/smbd --core=/core
--directory=/usr/local/src/samba-CVS300799/source/
GNU gdb 4.17.0.4 with Linux/x86 hardware watchpoint and FPU support
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.

Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i486-delix-linux".
Core was generated by `/usr/local/samba/bin/smbd -D'.
Program terminated with signal 6, Abgebrochen.
Reading symbols from /usr/lib/libreadline.so.3...(no debugging symbols
found)...done.
Reading symbols from /lib/libcrypt.so.1...done.
Reading symbols from /lib/libncurses.so.4...done.
Reading symbols from /lib/libc.so.6...done.
Reading symbols from /lib/libtermcap.so.2...done.
Reading symbols from /lib/ld-linux.so.2...done.
Reading symbols from /lib/libnss_files.so.1...done.
Reading symbols from /lib/libnss_nis.so.1...done.
Reading symbols from /lib/libnsl.so.1...done.
#0  0x400bc7d1 in __kill ()
(gdb) where
#0  0x400bc7d1 in __kill ()
#1  0x400bc5ff in raise (sig=6) at ../sysdeps/posix/raise.c:27
#2  0x400bd80f in abort () at ../sysdeps/generic/abort.c:83
#3  0x81267c3 in ?? ()
#4  0x8117661 in ?? ()
#5  0x81176cc in ?? ()
#6  <signal handler called>

--------------------------------------------------
# Global parameters
 workgroup = SAMBA
 netbios name = FRAGGLE
 server string = Samba [%v]
 interfaces = 10.60.1.1/24
 encrypt passwords = Yes
 update encrypted = Yes
 server ntlmv2 = Auto
 client ntlmv2 = Auto
 passwd program = /usr/bin/passwd
 passwd chat debug = Yes
 username map = /usr/local/samba/lib/groups/users.map
 unix password sync = Yes
 log level = 0
 log file = /usr/local/samba/var/log.%m.%U.smb
 max log size = 1000
 time server = Yes
 change notify timeout = 3
 keepalive = 0
 read size = 4096
 socket options = TCP_NODELAY SO_KEEPALIVE
 local group map = /opt/samba/lib/groups/local_groups
 domain group map = /opt/samba/lib/groups/domain_groups
 domain user map = /opt/samba/lib/groups/domain_user_map
 logon script = %U.bat
 logon path = \\%N\profiles\%U
 logon drive = h:
 logon home = \\%N\%U\data
 domain logons = Yes
 os level = 65
 preferred master = True
 domain master = True
 dns proxy = No
 wins support = Yes
 message command = cat %s| smbclient -M frog
 socket address = 10.60.1.1
 time offset = 180
 panic action = tail -15 /opt/samba/var/log.smb| smbclient -M frog
 admin users = root
 write list = admin, root, @staff
 hosts allow = 10.60. 127.0.0.1
 printing = lprng
 print command = lpr -P%p %s
 lppause command = lpc hold %p %j
 lpresume command = lpc release %p %j
 queuepause command = lpc stop %p
 queueresume command = lpc start %p
 printer driver location = \\FRAGGLE\print$
 mangle case = Yes
 hide dot files = No
 veto files = /dev/proc/lost+found/
 map archive = No
 delete readonly = Yes
 vfs option =

[audio]
 comment = mp3 audio filez
 path = /pub/audio
 read only = No
 vfs option =
----------------------------------