search for: ber_memfree_x

...oc_free_internal (talloc.c:1072) ==28624== by 0x4A65C9C: _talloc_free (talloc.c:1647) ==28624== by 0x10C1DD: main (smbpasswd.c:631) ==28624== Address 0x5f20668 is 0 bytes inside a block of size 12 free'd ==28624== at 0x482B3A8: free (vg_replace_malloc.c:473) ==28624== by 0x568F820: ber_memfree_x (in /usr/lib/i386-linux-gnu/liblber-2.4.so.2.10.3) ==28624== by 0x56B456E: ldap_mods_free (in /usr/lib/i386-linux-gnu/libldap_r-2.4.so.2.10.3) ==28624== by 0x4AA46F2: ldapsam_create_user (pdb_ldap.c:5393) ==28624== by 0x4AC046E: pdb_create_user (pdb_interface.c:542) ==28624== by 0x4AB14...

On Fri, Mar 04, 2016 at 10:53:17AM +0100, Volker Lendecke wrote: > On Wed, Mar 02, 2016 at 09:23:34AM +0000, Rowland penny wrote: > > OK, here is the output: > > Can you try the attached (UNTESTED!) patch? > > Thanks, Gna, should have at least compiled it.... New patch :-) Volker -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-370000-0, fax:

...[2009/05/19 08:45:59, 0] lib/util.c:log_stack_trace(1706) BACKTRACE: 15 stack frames: #0 /usr/sbin/smbd(log_stack_trace+0x23) [0x822c3d3] #1 /usr/sbin/smbd(smb_panic+0x46) [0x822c4c6] #2 /usr/sbin/smbd [0x821a69a] #3 [0xb7eff420] #4 /usr/lib/liblber-2.4.so.2(ber_memfree_x+0x50) [0xb76ac300] #5 /usr/lib/libldap_r-2.4.so.2 [0xb76dc274] #6 /usr/lib/libldap_r-2.4.so.2 [0xb76bc6d8] #7 /usr/lib/libldap_r-2.4.so.2 [0xb76eb950] #8 /lib/ld-linux.so.2 [0xb7f0e453] #9 /lib/i686/cmov/libc.so.6(exit+0x89) [0xb7b23ab9] #10 /usr/sbin/smbd...

...lib/util.c:log_stack_trace(1706) > BACKTRACE: 15 stack frames: > #0 /usr/sbin/smbd(log_stack_trace+0x23) [0x822c3d3] > #1 /usr/sbin/smbd(smb_panic+0x46) [0x822c4c6] > #2 /usr/sbin/smbd [0x821a69a] > #3 [0xb7eff420] > #4 /usr/lib/liblber-2.4.so.2(ber_memfree_x+0x50) [0xb76ac300] > #5 /usr/lib/libldap_r-2.4.so.2 [0xb76dc274] > #6 /usr/lib/libldap_r-2.4.so.2 [0xb76bc6d8] > #7 /usr/lib/libldap_r-2.4.so.2 [0xb76eb950] > #8 /lib/ld-linux.so.2 [0xb7f0e453] > #9 /lib/i686/cmov/libc.so.6(exit+0x89) [0xb7b23ab9] >...

...in kerberos and ldap, but when with those two compiled in, smbd seems to freeze (nmbd and winbindd are OK). After a bit of investigation I notice something strange in truss: ... /1@1: -> libldap-2.3:ldap_free_urldesc(0x30dfe8, 0x32e048, 0x32dfb8, 0x3 /1@1: -> liblber-2.3:ber_memfree_x(0x32dfd7, 0x0, 0x0, 0x0) /1@1: -> libc:free(0x32dfd7, 0x0, 0x0, 0x0) /1@1: -> libc:_free_unlocked(0x32dfd7, 0x0, 0x0, 0xfee3c000) /1: Incurred fault #5, FLTACCESS %pc = 0xFEDC7D80 /1: siginfo: SIGBUS BUS_ADRALN addr=0x0032DFCF...

...in kerberos and ldap, but when with those two compiled in, smbd seems to freeze (nmbd and winbindd are OK). After a bit of investigation I notice something strange in truss: ... /1@1: -> libldap-2.3:ldap_free_urldesc(0x30dfe8, 0x32e048, 0x32dfb8, 0x3 /1@1: -> liblber-2.3:ber_memfree_x(0x32dfd7, 0x0, 0x0, 0x0) /1@1: -> libc:free(0x32dfd7, 0x0, 0x0, 0x0) /1@1: -> libc:_free_unlocked(0x32dfd7, 0x0, 0x0, 0xfee3c000) /1: Incurred fault #5, FLTACCESS %pc = 0xFEDC7D80 /1: siginfo: SIGBUS BUS_ADRALN addr=0x0032DFCF...

...by 0x10B29B: password_change (smbpasswd.c:264) ==2405== by 0x10BA77: process_root (smbpasswd.c:466) ==2405== by 0x10BF9C: main (smbpasswd.c:627) ==2405== ==2405== Invalid free() / delete / delete[] / realloc() ==2405== at 0x482B3A8: free (vg_replace_malloc.c:473) ==2405== by 0x5686820: ber_memfree_x (in /usr/lib/i386-linux-gnu/liblber-2.4.so.2.10.3) ==2405== by 0x56AB5AA: ldap_mods_free (in /usr/lib/i386-linux-gnu/libldap_r-2.4.so.2.10.3) ==2405== by 0x5728963: ldapmod_destructor (smbldap.c:266) ==2405== by 0x4A61AA3: _talloc_free_internal (talloc.c:1046) ==2405== by 0x4A6287F: _...

On 01/03/16 21:35, Garming Sam wrote: > Hi Rowland, > > This new segfault seems unrelated to the previous one. It's probably > something like a double free, which typically shouldn't be that hard to > fix. If you try running the tool under valgrind, it should provide > enough information to fix the issue. > > > Cheers, > > Garming > Who or what is