Segfault trigged by "password must change"

[Thomas Hood]

On Wed, Jun 27, 2012 at 5:48 AM, Andrew Bartlett <abartlet at samba.org> wrote:
>
> On Tue, 2012-06-26 at 16:30 +0200, Thomas Hood wrote:
> > Running samba4 4.0.0~alpha18.dfsg1-4ubuntu2 as domain controller under
> > Ubuntu 12.04, every time a user tries to log in when her password has
> > expired a segfault occurs.  Here's a backtrace.  Please let me know if
> > this has been fixed in later releases --- I didn't see anything
> > relevant in release notes --- or let me know what additional
> > information you might need to help find the bug.
>
> I've added a test for this, and I don't see this on current master.  Can
> you try beta2 and see if I've sorted it out with some related KDC
> changes (we did do some fixes in this area, but they should not have
> been segfaults).

Beta2 still segfaults.  Backtrace looks the same.


[2012/07/11 13:15:48,  2] ../source4/auth/sam.c:207(authsam_account_ok)
  sam_account_ok: Account for user 'foo at BAR' password must change!.
*** glibc detected *** samba: munmap_chunk(): invalid pointer:
0x00007f59904d4068 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x7e626)[0x7f59a2baa626]
/usr/lib/x86_64-linux-gnu/libasn1.so.8(der_free_octet_string+0xd)[0x7f599d320e7d]
/usr/lib/x86_64-linux-gnu/libasn1.so.8(free_METHOD_DATA+0x24)[0x7f599d2e5d04]
/usr/lib/x86_64-linux-gnu/libkdc.so.2(+0x10e3d)[0x7f59963e3e3d]
/usr/lib/x86_64-linux-gnu/libkdc.so.2(+0x1c233)[0x7f59963ef233]
/usr/lib/x86_64-linux-gnu/libkdc.so.2(krb5_kdc_process_krb5_request+0x88)[0x7f59963ef428]
/usr/lib/x86_64-linux-gnu/samba//service/kdc.so(+0x558a)[0x7f5996c2658a]
/usr/lib/x86_64-linux-gnu/samba//service/kdc.so(+0x5218)[0x7f5996c26218]
/usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so(+0x8b07)[0x7f59a070cb07]
/usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so(+0xbeb5)[0x7f59a070feb5]
/usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x6822)[0x7f59a2eef822]
/usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x90)[0x7f59a2eec8e0]
/usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_wait+0x1b)[0x7f59a2eeca6b]
/usr/lib/x86_64-linux-gnu/samba//process_model/standard.so(+0x1572)[0x7f599b2dc572]
/usr/lib/x86_64-linux-gnu/samba/libservice.so(task_server_startup+0x5f)[0x7f59a5ce2f4f]
/usr/lib/x86_64-linux-gnu/samba/libservice.so(server_service_startup+0x93)[0x7f59a5ce1b03]
samba[0x40962d]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed)[0x7f59a2b4d76d]
samba[0x4058a1]
======= Memory map: ========
[...]


# dpkg -l samba4 | grep ^ii
ii  samba4   4.0.0~beta2+dfsg1-1   SMB/CIFS file, NT domain and active
directory server (version 4)