talloc use after free in samba3upgrade

[Adam Tauno Williams]

On Tue, 2011-11-08 at 23:21 +1100, Andrew Bartlett wrote:
> On Mon, 2011-11-07 at 09:39 -0500, Adam Tauno Williams wrote:
> > > Output of the valgrind is attached.
> > And this one is with the correct path to samba-tool. :)
> > valgrind /usr/bin/python /opt/s4/sbin/samba-tool domain samba3upgrade  
> > --dbdir=/tmp/x  /tmp/x/smb.conf
> > > linux-hvej:~ # /opt/s4/sbin/samba --version
> > > Version 4.0.0alpha18-GIT-1d53109
> Using that git revision and the dataset from 'make test', I can
> reproduce (at least as far as an invalid read, but not an un-initialised
> read) the issue with the SDDL library, but it appears to be due to
> strspn in glibc reading beyond the NULL terminator. 
> So, the question really is, what is different about your setup?  
> Can you also try with the additional valgrind option --track-origins=yes

valgrind --track-origins=yes /usr/bin/python /opt/s4/sbin/samba-tool
domain samba3upgrade --dbdir=/tmp/x  /tmp/x/smb.conf 2>valgrind.out
-------------- next part --------------
A non-text attachment was scrubbed...
Name: valgrind.out.zip
Type: application/zip
Size: 6868 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20111108/fd080435/attachment.zip>