[Samba] libtalloc double free error again?

[Kinglok, Fong]

Hi,

This floods my server log running DC on 4.1.2.  I don’t know if it is the same problem like bug 9832?

Kinglok, Fong



======================================================= 

[2013/11/25 10:53:03.708423,  0] ../source3/lib/dumpcore.c:317(dump_core)
  dumping core in /usr/local/samba/var/cores/smbd
[2013/11/25 10:53:04.106077,  0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn)
  talloc: access after free error - first free may be at ../source3/smbd/open.c:1569
[2013/11/25 10:53:04.106163,  0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn)
  Bad talloc magic value - access after free
[2013/11/25 10:53:04.106194,  0] ../source3/lib/util.c:785(smb_panic_s3)
  PANIC (pid 20650): Bad talloc magic value - access after free
[2013/11/25 10:53:04.106573,  0] ../source3/lib/util.c:896(log_stack_trace)
  BACKTRACE: 22 stack frames:
   #0 /usr/local/samba/lib/libsmbconf.so.0(log_stack_trace+0x1f) [0x7f8ffd32f2d2]
   #1 /usr/local/samba/lib/libsmbconf.so.0(smb_panic_s3+0x6c) [0x7f8ffd32f14b]
   #2 /usr/local/samba/lib/libsamba-util.so.0(smb_panic+0x28) [0x7f8ffed9f17f]
   #3 /usr/local/samba/lib/private/libtalloc.so.2(+0x241d) [0x7f8ffe3c041d]
   #4 /usr/local/samba/lib/private/libtalloc.so.2(+0x2499) [0x7f8ffe3c0499]
   #5 /usr/local/samba/lib/private/libtalloc.so.2(+0x2516) [0x7f8ffe3c0516]
   #6 /usr/local/samba/lib/private/libtalloc.so.2(talloc_get_name+0x18) [0x7f8ffe3c1fb6]
   #7 /usr/local/samba/lib/private/libtalloc.so.2(_talloc_get_type_abort+0x4c) [0x7f8ffe3c2136]
   #8 /usr/local/samba/lib/libsmbconf.so.0(+0x33ccf) [0x7f8ffd33accf]
   #9 /usr/local/samba/lib/private/libtevent.so.0(tevent_common_loop_immediate+0x1f5) [0x7f8ffe5cc358]
   #10 /usr/local/samba/lib/libsmbconf.so.0(run_events_poll+0x56) [0x7f8ffd34b3f9]
   #11 /usr/local/samba/lib/libsmbconf.so.0(+0x44abd) [0x7f8ffd34babd]
   #12 /usr/local/samba/lib/private/libtevent.so.0(_tevent_loop_once+0xf4) [0x7f8ffe5cb492]
   #13 /usr/local/samba/lib/private/libsmbd_base.so(smbd_process+0x12ef) [0x7f8ffe94237b]
   #14 /usr/local/samba/sbin/smbd(+0xa12d) [0x7f8fff40512d]
   #15 /usr/local/samba/lib/libsmbconf.so.0(run_events_poll+0x55f) [0x7f8ffd34b902]
   #16 /usr/local/samba/lib/libsmbconf.so.0(+0x44bce) [0x7f8ffd34bbce]
   #17 /usr/local/samba/lib/private/libtevent.so.0(_tevent_loop_once+0xf4) [0x7f8ffe5cb492]
   #18 /usr/local/samba/sbin/smbd(+0xad97) [0x7f8fff405d97]
   #19 /usr/local/samba/sbin/smbd(main+0x1753) [0x7f8fff40763b]
   #20 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f8ffbbc1ead]
   #21 /usr/local/samba/sbin/smbd(+0x5ed9) [0x7f8fff400ed9]
[2013/11/25 10:53:04.106797,  0] ../source3/lib/dumpcore.c:317(dump_core)
  dumping core in /usr/local/samba/var/cores/smbd
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.samba.org/pipermail/samba/attachments/20131125/d12a70c0/attachment.pgp>