SIGBUS Panic in smbd

Lonnie J. Borntreger lonnie at borntreger.com
Sat Jun 26 16:59:43 GMT 1999


Solaris 7
CVS snapshot as of 6/24 - 11:45 CDT
Full Log attached

Log at error:
[1999/06/26 10:52:27, 4] lib/domain_namemap.c:load_name_map(580)
  load_name_map: Scanning name map /usr/local/samba/lib/domainuser.map
[1999/06/26 10:52:27, 5] lib/domain_namemap.c:make_name_entry(441)
  make_name_entry:,Administrator,root
[1999/06/26 10:52:27, 5] lib/domain_namemap.c:unix_name_to_nt_name_info(363)
  unix_name_to_nt_name_info: unix_name:root
[1999/06/26 10:52:28, 0] lib/fault.c:fault_report(40)
  ===============================================================
[1999/06/26 10:52:28, 0] lib/fault.c:fault_report(41)
  INTERNAL ERROR: Signal 10 in pid 22028 (2.1.0-prealpha)
  Please read the file BUGS.txt in the distribution
[1999/06/26 10:52:28, 0] lib/fault.c:fault_report(43)
  ===============================================================
[1999/06/26 10:52:28, 0] lib/util.c:smb_panic(2527)
  PANIC: internal error


By doing some debug statments and following the flow I found that the error
occurs at username.c:_Get_Pwnam(452) which looks like:
450                 spass = getspnam(ret->pw_name);
451                 if (spass && spass->sp_pwdp) {
452                     free(ret->pw_passwd);
453                     ret->pw_passwd = strdup(spass->sp_pwdp);
454                 }

It is dying on the free of ret->pw_passwd.  To make sure that the pointer
was valid I dumped some data and saw:
  _Get_Pwnam: s: root
  spass->sp_namp: root
  spass->sp_pwdp: <encrypted_passwd>
  ret->pw_name: root
  ret->pw_passwd: x
This looks correct for a shadow passwd setup.

Just for grins I commented out the free command.  smbd did not SUGBUS after
that (however after running for about 30s it did a SIGSEGV - as I expected
it would :)

Any clues?  Everything looks fine as far as I can tell, but obviously it's
not.


TTFN,
Lonnie Borntreger
lonnie at borntreger.com
http://www.borntreger.com/

=========================== MORE LOG =============================
[1999/06/26 10:52:13, 2] smbd/server.c:open_sockets(184)
  waiting for a connection
[1999/06/26 10:52:27, 4] locking/shmem_sysv.c:sysv_shm_open(540)
  Trying sysv shmem open of size 1048576
[1999/06/26 10:52:27, 5] locking/shmem_sysv.c:shm_initialize(420)
  shm_initialize : initializing shmem size 1048576
[1999/06/26 10:52:27, 6] locking/shmem_sysv.c:shm_alloc(249)
  shm_alloc : allocated 52 bytes at offset 48
[1999/06/26 10:52:27, 3] locking/shmem_sysv.c:sysv_shm_open(698)
  Initialised IPC area of size 1048576
[1999/06/26 10:52:27, 6] param/loadparm.c:lp_file_list_changed(1846)
  lp_file_list_changed()
  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last
mod!_time: Sat Jun 26 09:15:48 1999

[1999/06/26 10:52:27, 2] smbd/server.c:main(739)
  Changed root to /
[1999/06/26 10:52:27, 3] smbd/oplock.c:open_oplock_ipc(73)
  open_oplock_ipc: opening loopback UDP socket.
[1999/06/26 10:52:27, 3] lib/util_sock.c:open_socket_in(675)
  bind succeeded on port 0
[1999/06/26 10:52:27, 3] smbd/oplock.c:open_oplock_ipc(101)
  open_oplock ipc: pid = 22028, global_oplock_port = 36397
[1999/06/26 10:52:27, 3] smbd/process.c:smbd_process(759)
  priming nmbd
[1999/06/26 10:52:27, 3] lib/util_sock.c:send_one_packet(604)
  sending a packet of len 1 to (127.0.0.1) on port 137 of type DGRAM
[1999/06/26 10:52:27, 4] lib/time.c:TimeInit(110)
  Serverzone is 18000
[1999/06/26 10:52:27, 2] lib/access.c:check_access(232)
  Allowed connection from pocket.wh.com (10.0.0.5)
[1999/06/26 10:52:27, 6] smbd/process.c:process_smb(568)
  got message type 0x81 of len 0x44
[1999/06/26 10:52:27, 3] smbd/process.c:process_smb(569)
  Transaction 0 of length 72
[1999/06/26 10:52:27, 2] smbd/reply.c:reply_special(143)
  netbios connect: name1=GTO              name2=POCKET
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(432)
  _Get_Pwnam: user:pocket
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(531)
  _Get_Pwnam: user:pocket
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(432)
  _Get_Pwnam: user:pocket
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(531)
  _Get_Pwnam: user:pocket
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(432)
  _Get_Pwnam: user:POCKET
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(531)
  _Get_Pwnam: user:POCKET
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(432)
  _Get_Pwnam: user:Pocket
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(531)
  _Get_Pwnam: user:Pocket
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(432)
  _Get_Pwnam: user:pockeT
[1999/06/26 10:52:27, 5] lib/username.c:_Get_Pwnam(531)
  _Get_Pwnam: user:pockeT
[1999/06/26 10:52:27, 6] param/loadparm.c:lp_file_list_changed(1846)
  lp_file_list_changed()
  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last
mod!_time: Sat Jun 26 09:15:48 1999

[1999/06/26 10:52:27, 5] smbd/connection.c:claim_connection(127)
  trying claim /usr/local/samba/var/locks STATUS. 100000
[1999/06/26 10:52:27, 8] lib/util.c:fcntl_lock(2776)
  fcntl_lock 9 35 0 1 2
[1999/06/26 10:52:27, 8] lib/util.c:fcntl_lock(2837)
  Lock call successful
[1999/06/26 10:52:27, 8] lib/util.c:fcntl_lock(2776)
  fcntl_lock 9 35 0 1 3
[1999/06/26 10:52:27, 8] lib/util.c:fcntl_lock(2837)
  Lock call successful
[1999/06/26 10:52:27, 5] smbd/reply.c:reply_special(195)
  init msg_type=0x81 msg_flags=0x0
[1999/06/26 10:52:27, 6] lib/util_sock.c:write_socket(185)
  write_socket(8,4)
[1999/06/26 10:52:27, 6] lib/util_sock.c:write_socket(188)
  write_socket(8,4) wrote 4
[1999/06/26 10:52:27, 6] smbd/process.c:process_smb(568)
  got message type 0x0 of len 0x9a
[1999/06/26 10:52:27, 3] smbd/process.c:process_smb(569)
  Transaction 1 of length 158
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(496)
  size=154
  smb_com=0x72
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=0
  smb_flg2=0
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(502)
  smb_tid=0
  smb_pid=7967
  smb_uid=0
  smb_mid=7042
  smt_wct=0
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(512)
  smb_bcc=119
[1999/06/26 10:52:27, 3] smbd/process.c:switch_message(402)
  switch message SMBnegprot (pid 22028)
[1999/06/26 10:52:27, 3] smbd/negprot.c:reply_negprot(339)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[1999/06/26 10:52:27, 3] smbd/negprot.c:reply_negprot(339)
  Requested protocol [MICROSOFT NETWORKS 3.0]
[1999/06/26 10:52:27, 3] smbd/negprot.c:reply_negprot(339)
  Requested protocol [DOS LM1.2X002]
[1999/06/26 10:52:27, 3] smbd/negprot.c:reply_negprot(339)
  Requested protocol [DOS LANMAN2.1]
[1999/06/26 10:52:27, 3] smbd/negprot.c:reply_negprot(339)
  Requested protocol [Windows for Workgroups 3.1a]
[1999/06/26 10:52:27, 3] smbd/negprot.c:reply_negprot(339)
  Requested protocol [NT LM 0.12]
[1999/06/26 10:52:27, 6] param/loadparm.c:lp_file_list_changed(1846)
  lp_file_list_changed()
  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last
mod!_time: Sat Jun 26 09:15:48 1999

[1999/06/26 10:52:27, 6] param/loadparm.c:lp_file_list_changed(1846)
  lp_file_list_changed()
  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last
mod!_time: Sat Jun 26 09:15:48 1999

[1999/06/26 10:52:27, 3] smbd/negprot.c:reply_negprot(416)
  Selected protocol NT LM 0.12
[1999/06/26 10:52:27, 5] smbd/negprot.c:reply_negprot(423)
  negprot index=5
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(496)
  size=83
  smb_com=0x72
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=128
  smb_flg2=1
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(502)
  smb_tid=0
  smb_pid=7967
  smb_uid=0
  smb_mid=7042
  smt_wct=17
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[0]=5 (0x5)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[1]=12803 (0x3203)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[2]=256 (0x100)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[3]=65280 (0xFF00)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[4]=255 (0xFF)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[5]=0 (0x0)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[6]=256 (0x100)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[7]=3072 (0xC00)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[8]=86 (0x56)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[9]=14592 (0x3900)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[10]=3 (0x3)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[11]=32768 (0x8000)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[12]=40623 (0x9EAF)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[13]=60387 (0xEBE3)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[14]=48831 (0xBEBF)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[15]=11265 (0x2C01)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[16]=2049 (0x801)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(512)
  smb_bcc=14
[1999/06/26 10:52:27, 6] lib/util_sock.c:write_socket(185)
  write_socket(8,87)
[1999/06/26 10:52:27, 6] lib/util_sock.c:write_socket(188)
  write_socket(8,87) wrote 87
[1999/06/26 10:52:27, 6] smbd/process.c:process_smb(568)
  got message type 0x0 of len 0x78
[1999/06/26 10:52:27, 3] smbd/process.c:process_smb(569)
  Transaction 2 of length 124
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(496)
  size=120
  smb_com=0x73
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=16
  smb_flg2=0
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(502)
  smb_tid=0
  smb_pid=7967
  smb_uid=0
  smb_mid=7042
  smt_wct=13
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[0]=117 (0x75)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[1]=93 (0x5D)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[2]=2920 (0xB68)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[3]=50 (0x32)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[4]=0 (0x0)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[5]=22028 (0x560C)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[6]=0 (0x0)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[7]=0 (0x0)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[8]=0 (0x0)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[9]=0 (0x0)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[10]=0 (0x0)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[11]=1 (0x1)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(507)
  smb_vwv[12]=0 (0x0)
[1999/06/26 10:52:27, 5] lib/util.c:show_msg(512)
  smb_bcc=32
[1999/06/26 10:52:27, 3] smbd/process.c:switch_message(402)
  switch message SMBsesssetupX (pid 22028)
[1999/06/26 10:52:27, 3] smbd/reply.c:reply_sesssetup_and_X(628)
  Domain=[]  NativeOS=[WHNET] NativeLanMan=[Windows 4.0]
[1999/06/26 10:52:27, 3] smbd/reply.c:reply_sesssetup_and_X(631)
  sesssetupX:name=[]
[1999/06/26 10:52:27, 6] param/loadparm.c:lp_file_list_changed(1846)
  lp_file_list_changed()
  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last
mod!_time: Sat Jun 26 09:15:48 1999

[1999/06/26 10:52:27, 4] lib/domain_namemap.c:load_name_map(580)
  load_name_map: Scanning name map /usr/local/samba/lib/domainuser.map
[1999/06/26 10:52:27, 5] lib/domain_namemap.c:make_name_entry(441)
  make_name_entry:,Administrator,root
[1999/06/26 10:52:27, 5] lib/domain_namemap.c:unix_name_to_nt_name_info(363)
  unix_name_to_nt_name_info: unix_name:root
[1999/06/26 10:52:28, 0] lib/fault.c:fault_report(40)
  ===============================================================
[1999/06/26 10:52:28, 0] lib/fault.c:fault_report(41)
  INTERNAL ERROR: Signal 10 in pid 22028 (2.1.0-prealpha)
  Please read the file BUGS.txt in the distribution
[1999/06/26 10:52:28, 0] lib/fault.c:fault_report(43)
  ===============================================================
[1999/06/26 10:52:28, 0] lib/util.c:smb_panic(2527)
  PANIC: internal error



More information about the samba-ntdom mailing list