Panic in smb_krb5_create_memory_keytab
Volker Lendecke
Volker.Lendecke at SerNet.DE
Mon Jul 20 06:20:46 UTC 2015
Hi, Andrew!
Recently I've come across a talloc use-after-free panic in
smb_krb5_create_memory_keytab in a flaky build. See the attached
backtrace. If required, I still have the logs.tar.gz around.
Any idea?
Volker
--
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de
-------------- next part --------------
[1549(9892)/1868 at 1h48m49s] samba4.winbind.struct(ad_member:local)
[1550(9910)/1868 at 1h48m52s] samba4.winbind.pac(ad_member:local)
smbtorture 4.3.0pre1-DEVELOPERBUILD
Using seed 1437324546
Failed to create in-memory keytab: ???????1
talloc: access after free error - first free may be at ../source4/auth/kerberos/srv_keytab.c:303
Bad talloc magic value - access after free
smb_panic(): calling panic action [cd /memdisk/vlendec/manual/b11405/samba && /memdisk/vlendec/manual/b11405/samba/selftest/gdb_backtrace 28377 %$(MAKE_TEST_BINARY)]
sh: MAKE_TEST_BINARY: not found
[Thread debugging using libthread_db enabled]
warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffd69742000
0x00002b57d699f4ee in __libc_waitpid (pid=<value optimized out>,
stat_loc=0x7ffd6971c2fc, options=<value optimized out>)
at ../sysdeps/unix/sysv/linux/waitpid.c:32
32 ../sysdeps/unix/sysv/linux/waitpid.c: No such file or directory.
in ../sysdeps/unix/sysv/linux/waitpid.c
#0 0x00002b57d699f4ee in __libc_waitpid (pid=<value optimized out>,
stat_loc=0x7ffd6971c2fc, options=<value optimized out>)
at ../sysdeps/unix/sysv/linux/waitpid.c:32
oldtype = <value optimized out>
result = <value optimized out>
#1 0x00002b57d6934819 in do_system (line=<value optimized out>)
at ../sysdeps/posix/system.c:149
__result = -512
_buffer = {__routine = 0x2b57d6934b70 <cancel_handler>,
__arg = 0x7ffd6971c2f8, __canceltype = 0, __prev = 0x0}
_avail = 1
status = <value optimized out>
save = <value optimized out>
pid = 28383
sa = {__sigaction_handler = {sa_handler = 0x1, sa_sigaction = 0x1},
sa_mask = {__val = {65536, 0 <repeats 15 times>}}, sa_flags = 0,
sa_restorer = 0x2b57d68f90f0}
omask = {__val = {4096, 4294967295, 206158430224, 1, 2195512, 0, 0, 0,
47656070627328, 47656057800657, 47652662149121, 0, 47656124111000,
47656261882096, 140726372516624, 47656526596464}}
#2 0x00002b57cd6cb86f in smb_panic_default (
why=0x2b57ce595930 "Bad talloc magic value - access after free")
at ../lib/util/fault.c:141
result = 11095
pidstr = "28377\000\000\000\360\304qi\375\177\000\000\060\304qi"
cmdstring = "cd /memdisk/vlendec/manual/b11405/samba && /memdisk/vlendec/manual/b11405/samba/selftest/gdb_backtrace 28377 %$(MAKE_TEST_BINARY)\000\374j\005\000\000\000p\000\000\000\000\000\000\000\020\304qi\375\177\000\000\000\177\362\313W+\000\000\300\377\377\377\377\377\377\377N\350V\346W+\000\000\335\312\374j\005\000\000\000 in-memo\340\304qi\375\177\000"
__FUNCTION__ = "smb_panic_default"
#3 0x00002b57cd6cba05 in smb_panic (
why=0x2b57ce595930 "Bad talloc magic value - access after free")
at ../lib/util/fault.c:169
No locals.
#4 0x00002b57ce590837 in talloc_abort (
reason=0x2b57ce595930 "Bad talloc magic value - access after free")
at ../lib/talloc/talloc.c:343
No locals.
#5 0x00002b57ce5908b3 in talloc_abort_access_after_free ()
at ../lib/talloc/talloc.c:359
No locals.
#6 0x00002b57ce590930 in talloc_chunk_from_ptr (ptr=0x2b57e656d5d0)
at ../lib/talloc/talloc.c:380
pp = 0x2b57e656d5d0 "\211\377\377\377\211\377\377\a1"
tc = 0x2b57e656d570
#7 0x00002b57ce592f70 in _talloc_free (ptr=0x2b57e656d5d0,
location=0x2b57cbf28058 "../source4/auth/kerberos/srv_keytab.c:349")
at ../lib/talloc/talloc.c:1572
tc = 0x7ffd6971d310
#8 0x00002b57cbf1fd05 in smb_krb5_create_memory_keytab (
parent_ctx=0x2b57e656a850, context=0x2b57e656c970,
new_secret=0x2b57e656a1c0 "?????????????",
samAccountName=0x2b57e6568f50 "LOCALADMEMBER$",
realm=0x2b57e6568b50 "SAMBA.EXAMPLE.COM",
salt_principal=0x2b57e656e760 "host/localadmember.samba.example.com at SAMBA.EXAMPLE.COM", kvno=0, keytab=0x7ffd6971c638, keytab_name=0x7ffd6971c640)
at ../source4/auth/kerberos/srv_keytab.c:349
ret = -969269750
mem_ctx = 0x2b57e656d5d0
rand_string = 0x2b57e656dd20 "CtgX#-lDc4SIdl#t"
error_string = 0x2b57e656d5d0 "\211\377\377\377\211\377\377\a1"
__FUNCTION__ = "smb_krb5_create_memory_keytab"
#9 0x00002b57cbf23e04 in cli_credentials_get_keytab (cred=0x2b57e6567810,
lp_ctx=0x2b57ca488620, _ktc=0x7ffd6971c6d0)
at ../auth/credentials/credentials_krb5.c:866
ret = 0
ktc = 0x2b57e656da70
smb_krb5_context = 0x2b57e656a910
keytab_name = 0x0
keytab = 0x2b57e6567c00
mem_ctx = 0x2b57e656a850
username = 0x2b57e6568f50 "LOCALADMEMBER$"
realm = 0x2b57e6568b50 "SAMBA.EXAMPLE.COM"
error_string = 0x7ffd6971c6e0 "\005"
salt_principal = 0x2b57e656e760 "host/localadmember.samba.example.com at SAMBA.EXAMPLE.COM"
#10 0x00002b57cbf2416e in cli_credentials_get_server_gss_creds (
cred=0x2b57e6567810, lp_ctx=0x2b57ca488620, _gcc=0x7ffd6971c720)
at ../auth/credentials/credentials_krb5.c:984
ret = 0
maj_stat = 3864440000
min_stat = 11095
gcc = 0x2b57ce592908
ktc = 0x7ffd6971c700
smb_krb5_context = 0x2b57e656a910
mem_ctx = 0x2b57e6567c00
princ = 0x2b57e6568110
error_string = 0x2b57d04a79be "\353\aH\215\005\211", <incomplete sequence \360>
obtained = CRED_SPECIFIED
__FUNCTION__ = "cli_credentials_get_server_gss_creds"
#11 0x00002b57cd4959c1 in gensec_gssapi_server_start (
gensec_security=0x2b57e656c3f0)
at ../source4/auth/gensec/gensec_gssapi.c:219
nt_status = {v = 0}
ret = 11095
gensec_gssapi_state = 0x2b57e656acc0
machine_account = 0x2b57e6567810
gcc = 0x7ffd6971c760
__FUNCTION__ = "gensec_gssapi_server_start"
#12 0x00002b57cd495a59 in gensec_gssapi_sasl_server_start (
gensec_security=0x2b57e656c3f0)
at ../source4/auth/gensec/gensec_gssapi.c:237
nt_status = {v = 3864445936}
gensec_gssapi_state = 0x2b57e6567c00
#13 0x00002b57cd4945f9 in gensec_start_mech (gensec_security=0x2b57e656c3f0)
at ../auth/gensec/gensec_start.c:686
status = {v = 3864446160}
__FUNCTION__ = "gensec_start_mech"
#14 0x00002b57cd494a77 in gensec_start_mech_by_sasl_name (
gensec_security=0x2b57e656c3f0, sasl_name=0x2b57ca3f73a5 "GSSAPI")
at ../auth/gensec/gensec_start.c:806
__FUNCTION__ = "gensec_start_mech_by_sasl_name"
#15 0x00002b57ca14bc5e in torture_winbind_pac (tctx=0x2b57e65393b0,
sasl_mech=0x2b57ca3f73a5 "GSSAPI", mech=0x0)
at ../source4/torture/winbind/winbind.c:238
status = {v = 0}
gensec_client_context = 0x2b57e6568000
gensec_server_context = 0x2b57e656c3f0
machine_credentials = 0x2b57e6567810
client_to_server = {data = 0x0, length = 0}
server_to_client = {data = 0x0, length = 0}
auth_context = 0x2b57e6568be0
session_info = 0x2b57e65393b0
pac_data = 0x2b57ca550c80
tmp_ctx = 0x2b57e65677a0
#16 0x00002b57ca14c078 in torture_winbind_pac_gssapi (tctx=0x2b57e65393b0)
at ../source4/torture/winbind/winbind.c:280
No locals.
#17 0x00002b57cdb26e0f in wrap_simple_test (torture_ctx=0x2b57e65393b0,
tcase=0x2b57ca550aa0, test=0x2b57ca550bd0) at ../lib/torture/torture.c:633
fn = 0x2b57ca14c054 <torture_winbind_pac_gssapi>
#18 0x00002b57cdb26523 in internal_torture_run_test (context=0x2b57e65393b0,
tcase=0x2b57ca550aa0, test=0x2b57ca550bd0, already_setup=true,
restricted=0x0) at ../lib/torture/torture.c:442
success = false
subunit_testname = 0x2b57e6567730 "GSSAPI"
#19 0x00002b57cdb2678e in torture_run_tcase_restricted (
context=0x2b57e65393b0, tcase=0x2b57ca550aa0, restricted=0x0)
at ../lib/torture/torture.c:507
ret = true
test = 0x2b57ca550bd0
setup_succeeded = true
setup_reason = 0x2b57cdb28157 "Setup failed"
#20 0x00002b57cdb26125 in torture_run_suite_restricted (
context=0x2b57e65393b0, suite=0x2b57ca550990, restricted=0x0)
at ../lib/torture/torture.c:357
ret = true
tcase = 0x2b57ca550aa0
tsuite = 0x2b57ca488620
#21 0x00002b57cdb26084 in torture_run_suite (context=0x2b57e65393b0,
suite=0x2b57ca550990) at ../lib/torture/torture.c:339
No locals.
#22 0x00002b57c9d62d05 in run_matching (torture=0x2b57e65393b0,
prefix=0x2b57e6564620 "winbind", expr=0x2b57ca4cac80 "winbind.pac",
restricted=0x0, suite=0x2b57ca54a430, matched=0x7ffd6971cbce)
at ../source4/torture/smbtorture.c:93
name = 0x2b57e65676b0 "winbind.pac"
ret = true
o = 0x2b57ca550990
t = 0x2b57e654fd70
p = 0x7ffd6971cb10
#23 0x00002b57c9d62d40 in run_matching (torture=0x2b57e65393b0, prefix=0x0,
expr=0x2b57ca4cac80 "winbind.pac", restricted=0x0, suite=0x2b57ca4ffd90,
matched=0x7ffd6971cbce) at ../source4/torture/smbtorture.c:95
name = 0x2b57e6564620 "winbind"
ret = true
o = 0x2b57ca54a430
t = 0x2b57ca48da20
p = 0x2b57ca1a7c88
#24 0x00002b57c9d62fa7 in torture_run_named_tests (torture=0x2b57e65393b0,
name=0x2b57ca4cac80 "winbind.pac", restricted=0x0)
at ../source4/torture/smbtorture.c:143
ret = true
matched = true
o = 0x2b57e65395a0
#25 0x00002b57c9d64b2c in main (argc=19, argv=0x7ffd6971d318)
at ../source4/torture/smbtorture.c:665
opt = -1
i = 2
correct = true
max_runtime = 1200
argc_new = 3
torture = 0x2b57e65393b0
results = 0x2b57e6539040
ui_ops = 0x2b57cdd29b20
argv_new = 0x2b57ca487500
pc = 0x2b57ca4871d0
target = 0x2b57ca491d50 "samba4"
status = {v = 1769067104}
shell = 0
ui_ops_name = 0x2b57ca4a46f0 "subunit"
basedir = 0x2b57ca4907e0 "/memdisk/vlendec/manual/b11405/samba/bin/ab/tmp"
outputdir = 0x2b57e65394f0 "/memdisk/vlendec/manual/b11405/samba/bin/ab/tmp/smbtorturelChSGz"
extra_module = 0x0
list_tests = 0
list_testsuites = 0
num_extra_users = 0
restricted = 0x0
num_restricted = -1
load_list = 0x0
long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4,
arg = 0x2b57d64a61e0, val = 0,
descrip = 0x2b57ca1a830f "Help options:", argDescrip = 0x0}, {
longName = 0x2b57ca1a831d "format", shortName = 0 '\000',
argInfo = 1, arg = 0x2b57ca642fc8, val = 0,
descrip = 0x2b57ca1a8328 "Output format (one of: simple, subunit)", argDescrip = 0x0}, {longName = 0x2b57ca1a8350 "smb-ports",
shortName = 112 'p', argInfo = 1, arg = 0x0, val = 1006,
descrip = 0x2b57ca1a835a "SMB ports", argDescrip = 0x0}, {
longName = 0x2b57ca1a8364 "basedir", shortName = 0 '\000',
argInfo = 1, arg = 0x7ffd6971d1c0, val = 0,
descrip = 0x2b57ca1a836c "base directory",
argDescrip = 0x2b57ca1a837b "BASEDIR"}, {
longName = 0x2b57ca1a8383 "seed", shortName = 0 '\000',
argInfo = 2, arg = 0x2b57ca649828, val = 0,
descrip = 0x2b57ca1a8388 "Seed to use for randomizer",
argDescrip = 0x0}, {longName = 0x2b57ca1a83a3 "num-progs",
shortName = 0 '\000', argInfo = 2, arg = 0x0, val = 1008,
descrip = 0x2b57ca1a83ad "num progs", argDescrip = 0x0}, {
longName = 0x2b57ca1a83b7 "num-ops", shortName = 0 '\000',
argInfo = 2, arg = 0x2b57ca642fd8, val = 0,
descrip = 0x2b57ca1a83bf "num ops", argDescrip = 0x0}, {
longName = 0x2b57ca1a83c7 "entries", shortName = 0 '\000',
argInfo = 2, arg = 0x2b57ca642fdc, val = 0,
descrip = 0x2b57ca1a83c7 "entries", argDescrip = 0x0}, {
longName = 0x2b57ca1a83cf "loadfile", shortName = 0 '\000',
argInfo = 1, arg = 0x0, val = 1000,
descrip = 0x2b57ca1a83d8 "NBench load file to use",
argDescrip = 0x0}, {longName = 0x2b57ca1a83f0 "list-suites",
shortName = 0 '\000', argInfo = 0, arg = 0x2b57ca649820, val = 0,
descrip = 0x2b57ca1a8400 "List available testsuites and exit",
argDescrip = 0x0}, {longName = 0x2b57ca1a8423 "list",
shortName = 0 '\000', argInfo = 0, arg = 0x2b57ca649824, val = 0,
descrip = 0x2b57ca1a8428 "List available tests in specified suites and exit", argDescrip = 0x0}, {longName = 0x2b57ca1a845a "unclist",
shortName = 0 '\000', argInfo = 1, arg = 0x0, val = 1001,
descrip = 0x2b57ca1a845a "unclist", argDescrip = 0x0}, {
longName = 0x2b57ca1a8462 "timelimit", shortName = 116 't',
argInfo = 2, arg = 0x0, val = 1002,
descrip = 0x2b57ca1a846c "Set time limit (in seconds)",
argDescrip = 0x0}, {longName = 0x2b57ca1a8488 "failures",
shortName = 102 'f', argInfo = 2, arg = 0x2b57ca642fe0, val = 0,
descrip = 0x2b57ca1a8488 "failures", argDescrip = 0x0}, {
longName = 0x2b57ca1a8491 "parse-dns", shortName = 68 'D',
argInfo = 1, arg = 0x0, val = 1003,
descrip = 0x2b57ca1a8491 "parse-dns", argDescrip = 0x0}, {
longName = 0x2b57ca1a849b "dangerous", shortName = 88 'X',
argInfo = 0, arg = 0x0, val = 1005,
descrip = 0x2b57ca1a84a8 "run dangerous tests (eg. wiping out password database)", argDescrip = 0x0}, {longName = 0x2b57ca1a84df "load-module",
shortName = 0 '\000', argInfo = 1, arg = 0x7ffd6971d1b0, val = 0,
descrip = 0x2b57ca1a84eb "load tests from DSO file",
argDescrip = 0x2b57ca1a8504 "SOFILE"}, {
longName = 0x2b57ca1a850b "shell", shortName = 0 '\000',
argInfo = 0, arg = 0x7ffd6971d1fc, val = 1,
descrip = 0x2b57ca1a8511 "Run shell", argDescrip = 0x0}, {
longName = 0x2b57ca1a851b "target", shortName = 84 'T',
argInfo = 1, arg = 0x2b57ca642fd0, val = 0,
descrip = 0x2b57ca1a8522 "samba3|samba4|other", argDescrip = 0x0},
{longName = 0x2b57ca1a8536 "async", shortName = 97 'a', argInfo = 0,
arg = 0x0, val = 1007, descrip = 0x2b57ca1a853c "run async tests",
argDescrip = 0x0}, {longName = 0x2b57ca1a854c "num-async",
shortName = 0 '\000', argInfo = 2, arg = 0x2b57ca642fe4, val = 0,
descrip = 0x2b57ca1a8558 "number of simultaneous async requests",
argDescrip = 0x0}, {longName = 0x2b57ca1a857e "maximum-runtime",
shortName = 0 '\000', argInfo = 2, arg = 0x7ffd6971d210, val = 0,
descrip = 0x2b57ca1a8590 "set maximum time for smbtorture to live", argDescrip = 0x2b57ca1a85b8 "seconds"}, {
longName = 0x2b57ca1a85c0 "extra-user", shortName = 0 '\000',
argInfo = 1, arg = 0x0, val = 1009,
descrip = 0x2b57ca1a85cb "extra user credentials",
argDescrip = 0x0}, {longName = 0x2b57ca1a85e2 "load-list",
shortName = 0 '\000', argInfo = 1, arg = 0x7ffd6971d1a0, val = 0,
descrip = 0x2b57ca1a85f0 "load a test id list from a text file",
argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000',
argInfo = 4, arg = 0x2b57ca649200, val = 0,
descrip = 0x2b57ca1a8615 "Common Samba options:",
argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000',
argInfo = 4, arg = 0x2b57ca649020, val = 0,
descrip = 0x2b57ca1a862b "Connection options:", argDescrip = 0x0},
{longName = 0x0, shortName = 0 '\000', argInfo = 4,
arg = 0x2b57ca649460, val = 0,
descrip = 0x2b57ca1a863f "Authentication options:",
argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000',
argInfo = 4, arg = 0x2b57ca6493c0, val = 0,
descrip = 0x2b57ca1a8657 "Version options:", argDescrip = 0x0}, {
longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0,
val = 0, descrip = 0x0, argDescrip = 0x0}}
Thread 1 (Thread 0x2b57ca484b80 (LWP 28377)):
#0 0x00002b57d699f4ee in __libc_waitpid (pid=<value optimized out>,
stat_loc=0x7ffd6971c2fc, options=<value optimized out>)
at ../sysdeps/unix/sysv/linux/waitpid.c:32
oldtype = <value optimized out>
result = <value optimized out>
#1 0x00002b57d6934819 in do_system (line=<value optimized out>)
at ../sysdeps/posix/system.c:149
__result = -512
_buffer = {__routine = 0x2b57d6934b70 <cancel_handler>,
__arg = 0x7ffd6971c2f8, __canceltype = 0, __prev = 0x0}
_avail = 1
status = <value optimized out>
save = <value optimized out>
pid = 28383
sa = {__sigaction_handler = {sa_handler = 0x1, sa_sigaction = 0x1},
sa_mask = {__val = {65536, 0 <repeats 15 times>}}, sa_flags = 0,
sa_restorer = 0x2b57d68f90f0}
omask = {__val = {4096, 4294967295, 206158430224, 1, 2195512, 0, 0, 0,
47656070627328, 47656057800657, 47652662149121, 0, 47656124111000,
47656261882096, 140726372516624, 47656526596464}}
#2 0x00002b57cd6cb86f in smb_panic_default (
why=0x2b57ce595930 "Bad talloc magic value - access after free")
at ../lib/util/fault.c:141
result = 11095
pidstr = "28377\000\000\000\360\304qi\375\177\000\000\060\304qi"
cmdstring = "cd /memdisk/vlendec/manual/b11405/samba && /memdisk/vlendec/manual/b11405/samba/selftest/gdb_backtrace 28377 %$(MAKE_TEST_BINARY)\000\374j\005\000\000\000p\000\000\000\000\000\000\000\020\304qi\375\177\000\000\000\177\362\313W+\000\000\300\377\377\377\377\377\377\377N\350V\346W+\000\000\335\312\374j\005\000\000\000 in-memo\340\304qi\375\177\000"
__FUNCTION__ = "smb_panic_default"
#3 0x00002b57cd6cba05 in smb_panic (
why=0x2b57ce595930 "Bad talloc magic value - access after free")
at ../lib/util/fault.c:169
No locals.
#4 0x00002b57ce590837 in talloc_abort (
reason=0x2b57ce595930 "Bad talloc magic value - access after free")
at ../lib/talloc/talloc.c:343
No locals.
#5 0x00002b57ce5908b3 in talloc_abort_access_after_free ()
at ../lib/talloc/talloc.c:359
No locals.
#6 0x00002b57ce590930 in talloc_chunk_from_ptr (ptr=0x2b57e656d5d0)
at ../lib/talloc/talloc.c:380
pp = 0x2b57e656d5d0 "\211\377\377\377\211\377\377\a1"
tc = 0x2b57e656d570
#7 0x00002b57ce592f70 in _talloc_free (ptr=0x2b57e656d5d0,
location=0x2b57cbf28058 "../source4/auth/kerberos/srv_keytab.c:349")
at ../lib/talloc/talloc.c:1572
tc = 0x7ffd6971d310
#8 0x00002b57cbf1fd05 in smb_krb5_create_memory_keytab (
parent_ctx=0x2b57e656a850, context=0x2b57e656c970,
new_secret=0x2b57e656a1c0 "?????????????",
samAccountName=0x2b57e6568f50 "LOCALADMEMBER$",
realm=0x2b57e6568b50 "SAMBA.EXAMPLE.COM",
salt_principal=0x2b57e656e760 "host/localadmember.samba.example.com at SAMBA.EXAMPLE.COM", kvno=0, keytab=0x7ffd6971c638, keytab_name=0x7ffd6971c640)
at ../source4/auth/kerberos/srv_keytab.c:349
ret = -969269750
mem_ctx = 0x2b57e656d5d0
rand_string = 0x2b57e656dd20 "CtgX#-lDc4SIdl#t"
error_string = 0x2b57e656d5d0 "\211\377\377\377\211\377\377\a1"
__FUNCTION__ = "smb_krb5_create_memory_keytab"
#9 0x00002b57cbf23e04 in cli_credentials_get_keytab (cred=0x2b57e6567810,
lp_ctx=0x2b57ca488620, _ktc=0x7ffd6971c6d0)
at ../auth/credentials/credentials_krb5.c:866
ret = 0
ktc = 0x2b57e656da70
smb_krb5_context = 0x2b57e656a910
keytab_name = 0x0
keytab = 0x2b57e6567c00
mem_ctx = 0x2b57e656a850
username = 0x2b57e6568f50 "LOCALADMEMBER$"
realm = 0x2b57e6568b50 "SAMBA.EXAMPLE.COM"
error_string = 0x7ffd6971c6e0 "\005"
salt_principal = 0x2b57e656e760 "host/localadmember.samba.example.com at SAMBA.EXAMPLE.COM"
#10 0x00002b57cbf2416e in cli_credentials_get_server_gss_creds (
cred=0x2b57e6567810, lp_ctx=0x2b57ca488620, _gcc=0x7ffd6971c720)
at ../auth/credentials/credentials_krb5.c:984
ret = 0
maj_stat = 3864440000
min_stat = 11095
gcc = 0x2b57ce592908
ktc = 0x7ffd6971c700
smb_krb5_context = 0x2b57e656a910
mem_ctx = 0x2b57e6567c00
princ = 0x2b57e6568110
error_string = 0x2b57d04a79be "\353\aH\215\005\211", <incomplete sequence \360>
obtained = CRED_SPECIFIED
__FUNCTION__ = "cli_credentials_get_server_gss_creds"
#11 0x00002b57cd4959c1 in gensec_gssapi_server_start (
gensec_security=0x2b57e656c3f0)
at ../source4/auth/gensec/gensec_gssapi.c:219
nt_status = {v = 0}
ret = 11095
gensec_gssapi_state = 0x2b57e656acc0
machine_account = 0x2b57e6567810
gcc = 0x7ffd6971c760
__FUNCTION__ = "gensec_gssapi_server_start"
#12 0x00002b57cd495a59 in gensec_gssapi_sasl_server_start (
gensec_security=0x2b57e656c3f0)
at ../source4/auth/gensec/gensec_gssapi.c:237
nt_status = {v = 3864445936}
gensec_gssapi_state = 0x2b57e6567c00
#13 0x00002b57cd4945f9 in gensec_start_mech (gensec_security=0x2b57e656c3f0)
at ../auth/gensec/gensec_start.c:686
status = {v = 3864446160}
__FUNCTION__ = "gensec_start_mech"
#14 0x00002b57cd494a77 in gensec_start_mech_by_sasl_name (
gensec_security=0x2b57e656c3f0, sasl_name=0x2b57ca3f73a5 "GSSAPI")
at ../auth/gensec/gensec_start.c:806
__FUNCTION__ = "gensec_start_mech_by_sasl_name"
#15 0x00002b57ca14bc5e in torture_winbind_pac (tctx=0x2b57e65393b0,
sasl_mech=0x2b57ca3f73a5 "GSSAPI", mech=0x0)
at ../source4/torture/winbind/winbind.c:238
status = {v = 0}
gensec_client_context = 0x2b57e6568000
gensec_server_context = 0x2b57e656c3f0
machine_credentials = 0x2b57e6567810
client_to_server = {data = 0x0, length = 0}
server_to_client = {data = 0x0, length = 0}
auth_context = 0x2b57e6568be0
session_info = 0x2b57e65393b0
pac_data = 0x2b57ca550c80
tmp_ctx = 0x2b57e65677a0
#16 0x00002b57ca14c078 in torture_winbind_pac_gssapi (tctx=0x2b57e65393b0)
at ../source4/torture/winbind/winbind.c:280
No locals.
#17 0x00002b57cdb26e0f in wrap_simple_test (torture_ctx=0x2b57e65393b0,
tcase=0x2b57ca550aa0, test=0x2b57ca550bd0) at ../lib/torture/torture.c:633
fn = 0x2b57ca14c054 <torture_winbind_pac_gssapi>
#18 0x00002b57cdb26523 in internal_torture_run_test (context=0x2b57e65393b0,
tcase=0x2b57ca550aa0, test=0x2b57ca550bd0, already_setup=true,
restricted=0x0) at ../lib/torture/torture.c:442
success = false
subunit_testname = 0x2b57e6567730 "GSSAPI"
#19 0x00002b57cdb2678e in torture_run_tcase_restricted (
context=0x2b57e65393b0, tcase=0x2b57ca550aa0, restricted=0x0)
at ../lib/torture/torture.c:507
ret = true
test = 0x2b57ca550bd0
setup_succeeded = true
setup_reason = 0x2b57cdb28157 "Setup failed"
#20 0x00002b57cdb26125 in torture_run_suite_restricted (
context=0x2b57e65393b0, suite=0x2b57ca550990, restricted=0x0)
at ../lib/torture/torture.c:357
ret = true
tcase = 0x2b57ca550aa0
tsuite = 0x2b57ca488620
#21 0x00002b57cdb26084 in torture_run_suite (context=0x2b57e65393b0,
suite=0x2b57ca550990) at ../lib/torture/torture.c:339
No locals.
#22 0x00002b57c9d62d05 in run_matching (torture=0x2b57e65393b0,
prefix=0x2b57e6564620 "winbind", expr=0x2b57ca4cac80 "winbind.pac",
restricted=0x0, suite=0x2b57ca54a430, matched=0x7ffd6971cbce)
at ../source4/torture/smbtorture.c:93
name = 0x2b57e65676b0 "winbind.pac"
ret = true
o = 0x2b57ca550990
t = 0x2b57e654fd70
p = 0x7ffd6971cb10
#23 0x00002b57c9d62d40 in run_matching (torture=0x2b57e65393b0, prefix=0x0,
expr=0x2b57ca4cac80 "winbind.pac", restricted=0x0, suite=0x2b57ca4ffd90,
matched=0x7ffd6971cbce) at ../source4/torture/smbtorture.c:95
name = 0x2b57e6564620 "winbind"
ret = true
o = 0x2b57ca54a430
t = 0x2b57ca48da20
p = 0x2b57ca1a7c88
#24 0x00002b57c9d62fa7 in torture_run_named_tests (torture=0x2b57e65393b0,
name=0x2b57ca4cac80 "winbind.pac", restricted=0x0)
at ../source4/torture/smbtorture.c:143
ret = true
matched = true
o = 0x2b57e65395a0
#25 0x00002b57c9d64b2c in main (argc=19, argv=0x7ffd6971d318)
at ../source4/torture/smbtorture.c:665
opt = -1
i = 2
correct = true
max_runtime = 1200
argc_new = 3
torture = 0x2b57e65393b0
results = 0x2b57e6539040
ui_ops = 0x2b57cdd29b20
argv_new = 0x2b57ca487500
pc = 0x2b57ca4871d0
target = 0x2b57ca491d50 "samba4"
status = {v = 1769067104}
shell = 0
ui_ops_name = 0x2b57ca4a46f0 "subunit"
basedir = 0x2b57ca4907e0 "/memdisk/vlendec/manual/b11405/samba/bin/ab/tmp"
outputdir = 0x2b57e65394f0 "/memdisk/vlendec/manual/b11405/samba/bin/ab/tmp/smbtorturelChSGz"
extra_module = 0x0
list_tests = 0
list_testsuites = 0
num_extra_users = 0
restricted = 0x0
num_restricted = -1
load_list = 0x0
long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4,
arg = 0x2b57d64a61e0, val = 0,
descrip = 0x2b57ca1a830f "Help options:", argDescrip = 0x0}, {
longName = 0x2b57ca1a831d "format", shortName = 0 '\000',
argInfo = 1, arg = 0x2b57ca642fc8, val = 0,
descrip = 0x2b57ca1a8328 "Output format (one of: simple, subunit)", argDescrip = 0x0}, {longName = 0x2b57ca1a8350 "smb-ports",
shortName = 112 'p', argInfo = 1, arg = 0x0, val = 1006,
descrip = 0x2b57ca1a835a "SMB ports", argDescrip = 0x0}, {
longName = 0x2b57ca1a8364 "basedir", shortName = 0 '\000',
argInfo = 1, arg = 0x7ffd6971d1c0, val = 0,
descrip = 0x2b57ca1a836c "base directory",
argDescrip = 0x2b57ca1a837b "BASEDIR"}, {
longName = 0x2b57ca1a8383 "seed", shortName = 0 '\000',
argInfo = 2, arg = 0x2b57ca649828, val = 0,
descrip = 0x2b57ca1a8388 "Seed to use for randomizer",
argDescrip = 0x0}, {longName = 0x2b57ca1a83a3 "num-progs",
shortName = 0 '\000', argInfo = 2, arg = 0x0, val = 1008,
descrip = 0x2b57ca1a83ad "num progs", argDescrip = 0x0}, {
longName = 0x2b57ca1a83b7 "num-ops", shortName = 0 '\000',
argInfo = 2, arg = 0x2b57ca642fd8, val = 0,
descrip = 0x2b57ca1a83bf "num ops", argDescrip = 0x0}, {
longName = 0x2b57ca1a83c7 "entries", shortName = 0 '\000',
argInfo = 2, arg = 0x2b57ca642fdc, val = 0,
descrip = 0x2b57ca1a83c7 "entries", argDescrip = 0x0}, {
longName = 0x2b57ca1a83cf "loadfile", shortName = 0 '\000',
argInfo = 1, arg = 0x0, val = 1000,
descrip = 0x2b57ca1a83d8 "NBench load file to use",
argDescrip = 0x0}, {longName = 0x2b57ca1a83f0 "list-suites",
shortName = 0 '\000', argInfo = 0, arg = 0x2b57ca649820, val = 0,
descrip = 0x2b57ca1a8400 "List available testsuites and exit",
argDescrip = 0x0}, {longName = 0x2b57ca1a8423 "list",
shortName = 0 '\000', argInfo = 0, arg = 0x2b57ca649824, val = 0,
descrip = 0x2b57ca1a8428 "List available tests in specified suites and exit", argDescrip = 0x0}, {longName = 0x2b57ca1a845a "unclist",
shortName = 0 '\000', argInfo = 1, arg = 0x0, val = 1001,
descrip = 0x2b57ca1a845a "unclist", argDescrip = 0x0}, {
longName = 0x2b57ca1a8462 "timelimit", shortName = 116 't',
argInfo = 2, arg = 0x0, val = 1002,
descrip = 0x2b57ca1a846c "Set time limit (in seconds)",
argDescrip = 0x0}, {longName = 0x2b57ca1a8488 "failures",
shortName = 102 'f', argInfo = 2, arg = 0x2b57ca642fe0, val = 0,
descrip = 0x2b57ca1a8488 "failures", argDescrip = 0x0}, {
longName = 0x2b57ca1a8491 "parse-dns", shortName = 68 'D',
argInfo = 1, arg = 0x0, val = 1003,
descrip = 0x2b57ca1a8491 "parse-dns", argDescrip = 0x0}, {
longName = 0x2b57ca1a849b "dangerous", shortName = 88 'X',
argInfo = 0, arg = 0x0, val = 1005,
descrip = 0x2b57ca1a84a8 "run dangerous tests (eg. wiping out password database)", argDescrip = 0x0}, {longName = 0x2b57ca1a84df "load-module",
shortName = 0 '\000', argInfo = 1, arg = 0x7ffd6971d1b0, val = 0,
descrip = 0x2b57ca1a84eb "load tests from DSO file",
argDescrip = 0x2b57ca1a8504 "SOFILE"}, {
longName = 0x2b57ca1a850b "shell", shortName = 0 '\000',
argInfo = 0, arg = 0x7ffd6971d1fc, val = 1,
descrip = 0x2b57ca1a8511 "Run shell", argDescrip = 0x0}, {
longName = 0x2b57ca1a851b "target", shortName = 84 'T',
argInfo = 1, arg = 0x2b57ca642fd0, val = 0,
descrip = 0x2b57ca1a8522 "samba3|samba4|other", argDescrip = 0x0},
{longName = 0x2b57ca1a8536 "async", shortName = 97 'a', argInfo = 0,
arg = 0x0, val = 1007, descrip = 0x2b57ca1a853c "run async tests",
argDescrip = 0x0}, {longName = 0x2b57ca1a854c "num-async",
shortName = 0 '\000', argInfo = 2, arg = 0x2b57ca642fe4, val = 0,
descrip = 0x2b57ca1a8558 "number of simultaneous async requests",
argDescrip = 0x0}, {longName = 0x2b57ca1a857e "maximum-runtime",
shortName = 0 '\000', argInfo = 2, arg = 0x7ffd6971d210, val = 0,
descrip = 0x2b57ca1a8590 "set maximum time for smbtorture to live", argDescrip = 0x2b57ca1a85b8 "seconds"}, {
longName = 0x2b57ca1a85c0 "extra-user", shortName = 0 '\000',
argInfo = 1, arg = 0x0, val = 1009,
descrip = 0x2b57ca1a85cb "extra user credentials",
argDescrip = 0x0}, {longName = 0x2b57ca1a85e2 "load-list",
shortName = 0 '\000', argInfo = 1, arg = 0x7ffd6971d1a0, val = 0,
descrip = 0x2b57ca1a85f0 "load a test id list from a text file",
argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000',
argInfo = 4, arg = 0x2b57ca649200, val = 0,
descrip = 0x2b57ca1a8615 "Common Samba options:",
argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000',
argInfo = 4, arg = 0x2b57ca649020, val = 0,
descrip = 0x2b57ca1a862b "Connection options:", argDescrip = 0x0},
{longName = 0x0, shortName = 0 '\000', argInfo = 4,
arg = 0x2b57ca649460, val = 0,
descrip = 0x2b57ca1a863f "Authentication options:",
argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000',
argInfo = 4, arg = 0x2b57ca6493c0, val = 0,
descrip = 0x2b57ca1a8657 "Version options:", argDescrip = 0x0}, {
longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0,
val = 0, descrip = 0x0, argDescrip = 0x0}}
oldtype = <value optimized out>
result = <value optimized out>
A debugging session is active.
Inferior 1 [process 28377] will be detached.
Quit anyway? (y or n) [answered Y; input not from terminal]
smb_panic(): action returned status 0
PANIC: Bad talloc magic value - access after free
UNEXPECTED(error): samba4.winbind.pac.GSSAPI (samba.subunit.RemotedTestCase)(ad_member:local)
REASON: Exception: Exception: was started but never finished!
UNEXPECTED(error): samba4.winbind.pac.GSSAPI(ad_member:local) (samba.subunit.RemotedTestCase)
REASON: was started but never finished!
FAILED (0 failures, 2 errors and 0 unexpected successes in 0 testsuites)
A summary with detailed information can be found in:
./bin/ab/summary
TOP 10 slowest tests
samba3.local.nss(ad_dc:local) -> 690
samba.tests.docs -> 271
samba4.blackbox.upgradeprovision.release-4-0-0 -> 171
samba4.blackbox.upgradeprovision.alpha13 -> 168
samba4.winbind.struct(ad_dc_ntvfs:local) -> 167
samba4.raw.notify(ad_dc_ntvfs) -> 111
samba3.base.delaywrite(ad_dc) -> 107
samba3.raw.notify(ad_dc) -> 102
samba3.raw.notify(nt4_dc) -> 97
samba3.smb2.notify(ad_dc) -> 85
test: running (/usr/bin/perl /memdisk/vlendec/manual/b11405/samba/selftest/selftest.pl --target=samba --prefix=./bin/ab --srcdir=/memdisk/vlendec/manual/b11405/samba --exclude=/memdisk/vlendec/manual/b11405/samba/selftest/skip --testlist="/usr/bin/python /memdisk/vlendec/manual/b11405/samba/selftest/tests.py|" --testlist="/usr/bin/python /memdisk/vlendec/manual/b11405/samba/source3/selftest/tests.py|" --testlist="/usr/bin/python /memdisk/vlendec/manual/b11405/samba/source4/selftest/tests.py|" --exclude=/memdisk/vlendec/manual/b11405/samba/selftest/slow --nss_wrapper_so_path=/memdisk/vlendec/manual/b11405/samba/bin/default/lib/nss_wrapper/libnss-wrapper.so --resolv_wrapper_so_path=/memdisk/vlendec/manual/b11405/samba/bin/default/lib/resolv_wrapper/libresolv-wrapper.so --socket_wrapper_so_path=/memdisk/vlendec/manual/b11405/samba/bin/default/lib/socket_wrapper/libsocket-wrapper.so --uid_wrapper_so_path=/memdisk/vlendec/manual/b11405/samba/bin/default/lib/uid_wrapper/libuid-wrapper.so --use-dns-faking --socket-wrapper && touch ./bin/ab/st_done) | /usr/bin/python -u /memdisk/vlendec/manual/b11405/samba/selftest/filter-subunit --expected-failures=/memdisk/vlendec/manual/b11405/samba/selftest/knownfail --flapping=/memdisk/vlendec/manual/b11405/samba/selftest/flapping --fail-immediately | tee ./bin/ab/subunit | /usr/bin/python -u /memdisk/vlendec/manual/b11405/samba/selftest/format-subunit --prefix=./bin/ab --immediate
ERROR: test failed with exit code 1
More information about the samba-technical
mailing list