Segfault in smbd: messaging_dgm_fde_active

Andrew Bartlett abartlet at samba.org
Wed Jun 27 02:13:36 UTC 2018


On Tue, 2018-06-26 at 11:15 +0200, Ralph Böhme wrote:
> On Tue, Jun 26, 2018 at 05:51:40PM +1200, Andrew Bartlett wrote:
> > On Tue, 2018-06-26 at 08:14 +1200, Andrew Bartlett wrote:
> > > On Mon, 2018-06-25 at 22:09 +0200, Ralph Böhme wrote:
> > > > Hi Andrew,
> > > > 
> > > > On Mon, Jun 25, 2018 at 05:07:36PM +1200, Andrew Bartlett via samba-technical wrote:
> > > > > Can someone look into this for me please?
> > > > 
> > > > I'm looking into it as time permits. Couldn't make sense out of it yet.
> > > 
> > > Thanks.  I'll try a bisect at work today.
> > 
> > Using the libsmbclient test form master in run in a testenv under
> > bisect I've got down to:
> > 
> > abartlet at ruth:/data/samba/git/samba9$ git bisect bad
> > b88f9384b01d91e6060cd806e03fe9c90cbdbcf1 is the first bad commit
> > commit b88f9384b01d91e6060cd806e03fe9c90cbdbcf1
> > Author: Stefan Metzmacher <metze at samba.org>
> > Date:   Sat Jun 17 01:06:46 2017 +0200
> > 
> >     s4:auth/ntlmssp: add support for using "winbind" as DC
> >     
> >     This adds support for trusted domains to the auth stack on AD DCs.
> >     
> >     Signed-off-by: Stefan Metzmacher <metze at samba.org>
> >     Reviewed-by: Andreas Schneider <asn at samba.org>
> 
> yesterday I tested whether commit 12a99eb4f2b0a52d3bbdf093ff3a2f0f6c2d2244 from
> 
> https://git.samba.org/?p=metze/samba/wip.git;a=shortlog;h=refs/heads/master4-impersonate
> 
> would fix the issue, but it didn't. Maybe you want to give it a whirl as well? I
> was in a bit of a hurry, so maybe I screwed up something.

It doesn't help for me either.  Still shows what looks like the same
backtrace, attached again just in case it helps. 

Sorry,

Andrew Bartlett

-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba



-------------- next part --------------
/data/samba/git/samba6/bin/smbd: ==11772== Invalid read of size 8
/data/samba/git/samba6/bin/smbd: ==11772==    at 0xAFA8D55: msg_dgm_ref_recv (messages_dgm_ref.c:133)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA7826: messaging_dgm_recv (messages_dgm.c:1333)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA765C: messaging_dgm_read_handler (messages_dgm.c:1298)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F0EA71: smbd_process (process.c:4123)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11493D: smbd_accept_connection (server.c:1031)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11563B: smbd_parent_loop (server.c:1383)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x117835: main (server.c:2148)
/data/samba/git/samba6/bin/smbd: ==11772==  Address 0x273f2358 is 2,104 bytes inside a block of size 8,320 free'd
/data/samba/git/samba6/bin/smbd: ==11772==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936962: _tc_free_poolmem (talloc.c:1059)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936DCB: _tc_free_internal (talloc.c:1194)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6937DF2: _tc_free_children_internal (talloc.c:1646)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936CF8: _tc_free_internal (talloc.c:1163)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6937DF2: _tc_free_children_internal (talloc.c:1646)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936CF8: _tc_free_internal (talloc.c:1163)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6937DF2: _tc_free_children_internal (talloc.c:1646)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936CF8: _tc_free_internal (talloc.c:1163)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936F54: _talloc_free_internal (talloc.c:1227)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x693821C: _talloc_free (talloc.c:1769)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F31691: smbd_smb2_auth_generic_return (smb2_sesssetup.c:469)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F32E43: smbd_smb2_session_setup_auth_return (smb2_sesssetup.c:1005)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F32C14: smbd_smb2_session_setup_gensec_done (smb2_sesssetup.c:951)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3B91AD: gensec_update_done (gensec.c:517)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3AAE50: gensec_spnego_update_post (spnego.c:2070)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3AA9BE: gensec_spnego_update_done (spnego.c:1951)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3B91AD: gensec_update_done (gensec.c:517)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3ADDC3: gensec_ntlmssp_update_done (ntlmssp.c:244)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3B43AC: ntlmssp_server_auth_done (ntlmssp_server.c:862)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11ACCA6E: auth_check_password_wrapper_done (auth.c:556)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11ACC4B8: auth_check_password_next (auth.c:396)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11ACC611: auth_check_password_done (auth.c:420)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470F2: _tevent_req_error (tevent_req.c:180)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6F55057: _tevent_req_nterror (tevent_ntstatus.c:46)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11ACEB72: winbind_check_password_done (auth_winbind.c:223)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x15E2B42B: dcerpc_winbind_SamLogon_r_done (ndr_winbind_c.c:4502)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xEA5A088: dcerpc_binding_handle_call_done (binding_handle.c:520)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xEA595CB: dcerpc_binding_handle_raw_call_done (binding_handle.c:203)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11EE9D77: irpc_bh_raw_call_incoming_handler (messaging.c:1069)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11EE8EEE: irpc_handler_reply (messaging.c:648)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11EE9378: irpc_handler (messaging.c:781)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11EE8BC9: imessaging_dgm_recv (messaging.c:566)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA8DA0: msg_dgm_ref_recv (messages_dgm_ref.c:143)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA7826: messaging_dgm_recv (messages_dgm.c:1333)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA765C: messaging_dgm_read_handler (messages_dgm.c:1298)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F0EA71: smbd_process (process.c:4123)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11493D: smbd_accept_connection (server.c:1031)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11563B: smbd_parent_loop (server.c:1383)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x117835: main (server.c:2148)
/data/samba/git/samba6/bin/smbd: ==11772==  Block was alloc'd at
/data/samba/git/samba6/bin/smbd: ==11772==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6935F3A: __talloc_with_prefix (talloc.c:763)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x69360FA: _talloc_pool (talloc.c:817)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936197: talloc_pool (talloc.c:839)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5AB19C7: talloc_stackframe_internal (talloc_stack.c:151)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5AB1ADD: _talloc_stackframe_pool (talloc_stack.c:184)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F0CE7D: smbd_tevent_trace_callback (process.c:3648)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D459CC: tevent_trace_point_callback (tevent_debug.c:117)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451C5: _tevent_loop_once (tevent.c:724)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F0EA71: smbd_process (process.c:4123)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11493D: smbd_accept_connection (server.c:1031)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11563B: smbd_parent_loop (server.c:1383)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x117835: main (server.c:2148)
/data/samba/git/samba6/bin/smbd: ==11772== 
/data/samba/git/samba6/bin/smbd: ==11772== Invalid read of size 8
/data/samba/git/samba6/bin/smbd: ==11772==    at 0xAFA8D61: msg_dgm_ref_recv (messages_dgm_ref.c:135)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA7826: messaging_dgm_recv (messages_dgm.c:1333)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA765C: messaging_dgm_read_handler (messages_dgm.c:1298)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F0EA71: smbd_process (process.c:4123)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11493D: smbd_accept_connection (server.c:1031)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11563B: smbd_parent_loop (server.c:1383)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x117835: main (server.c:2148)
/data/samba/git/samba6/bin/smbd: ==11772==  Address 0x273f2360 is 2,112 bytes inside a block of size 8,320 free'd
/data/samba/git/samba6/bin/smbd: ==11772==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936962: _tc_free_poolmem (talloc.c:1059)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936DCB: _tc_free_internal (talloc.c:1194)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6937DF2: _tc_free_children_internal (talloc.c:1646)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936CF8: _tc_free_internal (talloc.c:1163)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6937DF2: _tc_free_children_internal (talloc.c:1646)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936CF8: _tc_free_internal (talloc.c:1163)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6937DF2: _tc_free_children_internal (talloc.c:1646)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936CF8: _tc_free_internal (talloc.c:1163)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936F54: _talloc_free_internal (talloc.c:1227)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x693821C: _talloc_free (talloc.c:1769)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F31691: smbd_smb2_auth_generic_return (smb2_sesssetup.c:469)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F32E43: smbd_smb2_session_setup_auth_return (smb2_sesssetup.c:1005)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F32C14: smbd_smb2_session_setup_gensec_done (smb2_sesssetup.c:951)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3B91AD: gensec_update_done (gensec.c:517)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3AAE50: gensec_spnego_update_post (spnego.c:2070)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3AA9BE: gensec_spnego_update_done (spnego.c:1951)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3B91AD: gensec_update_done (gensec.c:517)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3ADDC3: gensec_ntlmssp_update_done (ntlmssp.c:244)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xE3B43AC: ntlmssp_server_auth_done (ntlmssp_server.c:862)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11ACCA6E: auth_check_password_wrapper_done (auth.c:556)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11ACC4B8: auth_check_password_next (auth.c:396)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11ACC611: auth_check_password_done (auth.c:420)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470F2: _tevent_req_error (tevent_req.c:180)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6F55057: _tevent_req_nterror (tevent_ntstatus.c:46)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11ACEB72: winbind_check_password_done (auth_winbind.c:223)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x15E2B42B: dcerpc_winbind_SamLogon_r_done (ndr_winbind_c.c:4502)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xEA5A088: dcerpc_binding_handle_call_done (binding_handle.c:520)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xEA595CB: dcerpc_binding_handle_raw_call_done (binding_handle.c:203)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D46FAF: _tevent_req_notify_callback (tevent_req.c:125)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D47084: tevent_req_finish (tevent_req.c:162)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D470AC: _tevent_req_done (tevent_req.c:168)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11EE9D77: irpc_bh_raw_call_incoming_handler (messaging.c:1069)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11EE8EEE: irpc_handler_reply (messaging.c:648)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11EE9378: irpc_handler (messaging.c:781)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11EE8BC9: imessaging_dgm_recv (messaging.c:566)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA8DA0: msg_dgm_ref_recv (messages_dgm_ref.c:143)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA7826: messaging_dgm_recv (messages_dgm.c:1333)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0xAFA765C: messaging_dgm_read_handler (messages_dgm.c:1298)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F0EA71: smbd_process (process.c:4123)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11493D: smbd_accept_connection (server.c:1031)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11563B: smbd_parent_loop (server.c:1383)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x117835: main (server.c:2148)
/data/samba/git/samba6/bin/smbd: ==11772==  Block was alloc'd at
/data/samba/git/samba6/bin/smbd: ==11772==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6935F3A: __talloc_with_prefix (talloc.c:763)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x69360FA: _talloc_pool (talloc.c:817)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6936197: talloc_pool (talloc.c:839)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5AB19C7: talloc_stackframe_internal (talloc_stack.c:151)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5AB1ADD: _talloc_stackframe_pool (talloc_stack.c:184)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F0CE7D: smbd_tevent_trace_callback (process.c:3648)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D459CC: tevent_trace_point_callback (tevent_debug.c:117)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451C5: _tevent_loop_once (tevent.c:724)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x5F0EA71: smbd_process (process.c:4123)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11493D: smbd_accept_connection (server.c:1031)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4E5D0: epoll_event_loop (tevent_epoll.c:728)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4EC08: epoll_event_loop_once (tevent_epoll.c:930)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B904: std_event_loop_once (tevent_standard.c:114)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D451E0: _tevent_loop_once (tevent.c:725)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D454F7: tevent_common_loop_wait (tevent.c:848)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4B9A6: std_event_loop_wait (tevent_standard.c:145)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x6D4559A: _tevent_loop_wait (tevent.c:867)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x11563B: smbd_parent_loop (server.c:1383)
/data/samba/git/samba6/bin/smbd: ==11772==    by 0x117835: main (server.c:2148)
/data/samba/git/samba6/bin/smbd: ==11772== 


More information about the samba-technical mailing list