Segfault trigged by "password must change"

[Andrew Bartlett]

On Tue, 2012-06-26 at 16:30 +0200, Thomas Hood wrote:
> Running samba4 4.0.0~alpha18.dfsg1-4ubuntu2 as domain controller under
> Ubuntu 12.04, every time a user tries to log in when her password has
> expired a segfault occurs.  Here's a backtrace.  Please let me know if
> this has been fixed in later releases --- I didn't see anything
> relevant in release notes --- or let me know what additional
> information you might need to help find the bug.
> 
> 
>   sam_account_ok: Account for user 'foo at BAR' password must change!.
> *** glibc detected *** samba: free(): invalid pointer: 0x00000000011432d0 ***
> ======= Backtrace: =========
> /lib/x86_64-linux-gnu/libc.so.6(+0x7e626)[0x7fe3f0a24626]
> /usr/lib/x86_64-linux-gnu/libasn1.so.8(der_free_octet_string+0xd)[0x7fe3eb621e7d]
> /usr/lib/x86_64-linux-gnu/libasn1.so.8(free_METHOD_DATA+0x24)[0x7fe3eb5e6d04]
> /usr/lib/x86_64-linux-gnu/libkdc.so.2(+0x10e3d)[0x7fe3e6ea5e3d]
> /usr/lib/x86_64-linux-gnu/libkdc.so.2(+0x1c233)[0x7fe3e6eb1233]
> /usr/lib/x86_64-linux-gnu/libkdc.so.2(krb5_kdc_process_krb5_request+0x88)[0x7fe3e6eb1428]
> /usr/lib/x86_64-linux-gnu/samba//service/kdc.so(+0x4c5e)[0x7fe3e76e7c5e]
> /usr/lib/x86_64-linux-gnu/samba//service/kdc.so(+0x5aa8)[0x7fe3e76e8aa8]
> /usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so(+0xa982)[0x7fe3ee516982]
> /usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so(+0xde60)[0x7fe3ee519e60]
> /usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so(+0xd567)[0x7fe3ee519567]
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x64d8)[0x7fe3f0d694d8]
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x90)[0x7fe3f0d66620]
> /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_wait+0x1b)[0x7fe3f0d667ab]
> /usr/lib/x86_64-linux-gnu/samba//process_model/standard.so(+0x14f4)[0x7fe3e8eae4f4]
> /usr/lib/x86_64-linux-gnu/samba/libservice.so(task_server_startup+0x8e)[0x7fe3f3bdf72b]
> /usr/lib/x86_64-linux-gnu/samba/libservice.so(+0x2c2a)[0x7fe3f3bddc2a]
> /usr/lib/x86_64-linux-gnu/samba/libservice.so(server_service_startup+0x11f)[0x7fe3f3bddd64]
> samba[0x40b436]
> samba(main+0x24)[0x40b505]
> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed)[0x7fe3f09c776d]
> samba[0x405689]

I've added a test for this, and I don't see this on current master.  Can
you try beta2 and see if I've sorted it out with some related KDC
changes (we did do some fixes in this area, but they should not have
been segfaults).

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org