segfault in mount.cifs

Bug #129209 reported by Krzysztof Chojnowski
2
Affects Status Importance Assigned to Milestone
samba (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Binary package hint: smbfs

We have samba (3.0.22-1ubuntu3.3 on dapper) configured as PDC in our domain . When I try to mount any of the cifs shares on the client (feisty samba 3.0.24-2ubuntu1.2) using command like:
mount -t cifs //fileserver/share /some/where -o user=name
i got this:

*** glibc detected *** /sbin/mount.cifs: free(): invalid pointer: 0x0805080a ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7ee17cd]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb7ee4e30]
/sbin/mount.cifs(main+0xef8)[0x804b458]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb7e8febc]
/sbin/mount.cifs[0x80491a1]
======= Memory map: ========
08048000-0804d000 r-xp 00000000 08:05 9971078 /sbin/mount.cifs
0804d000-0804e000 rw-p 00004000 08:05 9971078 /sbin/mount.cifs
0804e000-0806f000 rw-p 0804e000 00:00 0 [heap]
b7800000-b7821000 rw-p b7800000 00:00 0
b7821000-b7900000 ---p b7821000 00:00 0
b796e000-b7979000 r-xp 00000000 08:05 25166072 /lib/libgcc_s.so.1
b7979000-b797a000 rw-p 0000a000 08:05 25166072 /lib/libgcc_s.so.1
b7988000-b7ab2000 r-xp 00000000 08:05 8427384 /usr/lib/i686/cmov/libcrypto.so.0.9.8
b7ab2000-b7ac6000 rw-p 00129000 08:05 8427384 /usr/lib/i686/cmov/libcrypto.so.0.9.8
b7ac6000-b7aca000 rw-p b7ac6000 00:00 0
b7ad4000-b7ad7000 r-xp 00000000 08:05 29389739 /usr/lib/sasl2/libplain.so.2.0.22
b7ad7000-b7ad8000 rw-p 00003000 08:05 29389739 /usr/lib/sasl2/libplain.so.2.0.22
b7ad8000-b7ae3000 r-xp 00000000 08:05 29389720 /usr/lib/sasl2/libdigestmd5.so.2.0.22
b7ae3000-b7ae4000 rw-p 0000a000 08:05 29389720 /usr/lib/sasl2/libdigestmd5.so.2.0.22
b7ae4000-b7bba000 r-xp 00000000 08:05 29361277 /usr/lib/libdb-4.2.so
b7bba000-b7bbc000 rw-p 000d6000 08:05 29361277 /usr/lib/libdb-4.2.so
b7bbd000-b7bc4000 r-xp 00000000 08:05 29389730 /usr/lib/sasl2/libntlm.so.2.0.22
b7bc4000-b7bc5000 rw-p 00006000 08:05 29389730 /usr/lib/sasl2/libntlm.so.2.0.22
b7bc5000-b7bc9000 r-xp 00000000 08:05 29389711 /usr/lib/sasl2/libcrammd5.so.2.0.22
b7bc9000-b7bca000 rw-p 00003000 08:05 29389711 /usr/lib/sasl2/libcrammd5.so.2.0.22
b7bca000-b7bcd000 r-xp 00000000 08:05 29361245 /usr/lib/libgpg-error.so.0.3.0
b7bcd000-b7bce000 rw-p 00002000 08:05 29361245 /usr/lib/libgpg-error.so.0.3.0
b7bce000-b7c1d000 r-xp 00000000 08:05 29361137 /usr/lib/libgcrypt.so.11.2.2
b7c1d000-b7c1f000 rw-p 0004e000 08:05 29361137 /usr/lib/libgcrypt.so.11.2.2
b7c1f000-b7c32000 r-xp 00000000 08:05 29361099 /usr/lib/libz.so.1.2.3
b7c32000-b7c33000 rw-p 00012000 08:05 29361099 /usr/lib/libz.so.1.2.3
b7c33000-b7c47000 r-xp 00000000 08:05 29389574 /usr/lib/libtasn1.so.3.0.6
b7c47000-b7c48000 rw-p 00013000 08:05 29389574 /usr/lib/libtasn1.so.3.0.6
b7c48000-b7c4b000 r-xp 00000000 08:05 29458947 /usr/lib/libkrb5support.so.0.0
b7c4b000-b7c4c000 rw-p 00003000 08:05 29458947 /usr/lib/libkrb5support.so.0.0
b7c4c000-b7c4e000 r-xp 00000000 08:05 25166066 /lib/libcom_err.so.2.1
b7c4e000-b7c4f000 rw-p 00001000 08:05 25166066 /lib/libcom_err.so.2.1
b7c4f000-b7c73000 r-xp 00000000 08:05 29458944 /usr/lib/libk5crypto.so.3.0
b7c73000-b7c74000 rw-p 00024000 08:05 29458944 /usr/lib/libk5crypto.so.3.0
b7c74000-b7cef000 r-xp 00000000 08:05 29458946 /usr/lib/libkrb5.so.3.2
b7cef000-b7cf1000 rw-p 0007b000 08:05 29458946 /usr/lib/libkrb5.so.3.2
b7cf1000-b7d5b000 r-xp 00000000 08:05 29361230 /usr/lib/libgnutls.so.13.0.9
b7d5b000-b7d61000 rw-p 0006a000 08:05 29361230 /usr/lib/libgnutls.so.13.0.9
b7d61000-b7d77000 r-xp 00000000 08:05 29389750 /usr/lib/libsasl2.so.2.0.22
b7d77000-b7d78000 rw-p 00015000 08:05 29389750 /usr/lib/libsasl2.so.2.0.22
b7d78000-b7d7d000 r-xp 00000000 08:05 12600782 /lib/tls/i686/cmov/libcrypt-2.5.so
b7d7d000-b7d7f000 rw-p 00004000 08:05 12600782 /lib/tls/i686/cmov/libcrypt-2.5.so
b7d7f000-b7da6000 rw-p b7d7f000 00:00 0
b7da6000-b7db9000 r-xp 00000000 08:05 12600794 /lib/tls/i686/cmov/libpthread-2.5.so
b7db9000-b7dbb000 rw-p 00013000 08:05 12600794 /lib/tls/i686/cmov/libpthread-2.5.so
b7dbb000-b7dbd000 rw-p b7dbb000 00:00 0
b7dbd000-b7dd0000 r-xp 00000000 08:05 12600786 /lib/tls/i686/cmov/libnsl-2.5.so
b7dd0000-b7dd2000 rw-p 00012000 08:05 12600786 /lib/tls/i686/cmov/libnsl-2.5.so
b7dd2000-b7dd4000 rw-p b7dd2000 00:00 0
b7dd4000-b7dd6000 r-xp 00000000 08:05 12600783 /lib/tls/i686/cmov/libdl-2.5.so
b7dd6000-b7dd8000 rw-p 00001000 08:05 12600783 /lib/tls/i686/cmov/libdl-2.5.so
b7dd8000-b7df3000 r-xp 00000000 08:05 30385661 /usr/lib/libgssapi_krb5.so.2.2
b7df3000-b7df4000 rw-p 0001b000 08:05 30385661 /usr/lib/libgssapi_krb5.so.2.2
b7df4000-b7e00000 r-xp 00000000 08:05 29361322 /usr/lib/liblber.so.2.0.130
b7e00000-b7e01000 rw-p 0000b000 08:05 29361322 /usr/lib/liblber.so.2.0.130
b7e01000-b7e36000 r-xp 00000000 08:05 29361325 /usr/lib/libldap_r.so.2.0.130
b7e36000-b7e37000 rw-p 00035000 08:05 29361325 /usr/lib/libldap_r.so.2.0.130
b7e37000-b7e49000 r-xp 00000000 08:05 25681037 /lib/libnss_ldap-2.5.so
b7e49000-b7e4a000 rw-p 00012000 08:05 25681037 /lib/libnss_ldap-2.5.so
b7e4a000-b7e55000 rw-p b7e4a000 00:00 0
b7e55000-b7e64000 r-xp 00000000 08:05 12600795 /lib/tls/i686/cmov/libresolv-2.5.so
b7e64000-b7e66000 rw-p 0000f000 08:05 12600795 /lib/tls/i686/cmov/libresolv-2.5.so
b7e66000-b7e68000 rw-p b7e66000 00:00 0
b7e68000-b7e6c000 r-xp 00000000 08:05 12600788 /lib/tls/i686/cmov/libnss_dns-2.5.so
b7e6c000-b7e6e000 rw-p 00003000 08:05 12600788 /lib/tls/i686/cmov/libnss_dns-2.5.so
b7e6e000-b7e77000 r-xp 00000000 08:05 12600789 /lib/tls/i686/cmov/libnss_files-2.5.so
b7e77000-b7e79000 rw-p 00008000 08:05 12600789 /lib/tls/i686/cmov/libnss_files-2.5.so
b7e79000-b7e7a000 rw-p b7e79000 00:00 0
b7e7a000-b7fb5000 r-xp 00000000 08:05 12600780 /lib/tls/i686/cmov/libc-2.5.so
b7fb5000-b7fb6000 r--p 0013b000 08:05 12600780 /lib/tls/i686/cmov/libc-2.5.so
b7fb6000-b7fb8000 rw-p 0013c000 08:05 12600780 /lib/tls/i686/cmov/libc-2.5.so
b7fb8000-b7fbb000 rw-p b7fb8000 00:00 0
b7fbb000-b7fbe000 r-xp 00000000 08:05 29389725 /usr/lib/sasl2/liblogin.so.2.0.22
b7fbe000-b7fbf000 rw-p 00003000 08:05 29389725 /usr/lib/sasl2/liblogin.so.2.0.22
b7fbf000-b7fc2000 r-xp 00000000 08:05 29389699 /usr/lib/sasl2/libanonymous.so.2.0.22
b7fc2000-b7fc3000 rw-p 00002000 08:05 29389699 /usr/lib/sasl2/libanonymous.so.2.0.22
b7fc3000-b7fc8000 r-xp 00000000 08:05 29389749 /usr/lib/sasl2/libsasldb.so.2.0.22
b7fc8000-b7fc9000 rw-p 00004000 08:05 29389749 /usr/lib/sasl2/libsasldb.so.2.0.22
b7fc9000-b7fcb000 rw-p b7fc9000 00:00 0
b7fcb000-b7fe4000 r-xp 00000000 08:05 25166089 /lib/ld-2.5.so
b7fe4000-b7fe6000 rw-p 00019000 08:05 25166089 /lib/ld-2.5.so
bff59000-bff6e000 rw-p bff59000 00:00 0 [stack]
ffffe000-fffff000 r-xp 00000000 00:00 0 [vdso]

Weird thing is that after this command share is being mounted and I can access it, so this error is not so fatal. Nonetheless we using pam_mount in our environment, and IMHO this error causes pam_mount to be unable to unmount shares on logout. I can supply more informations if needed.

Revision history for this message
Krzysztof Chojnowski (notch) wrote :
Revision history for this message
Krzysztof Chojnowski (notch) wrote :

pam_mount umounting issue is unrelated to this bug, sorry for mistake. However this segfaults add significant delay to logging process (especially with lots of shares) and can be really annoying.

Revision history for this message
Soren Hansen (soren) wrote :

Does it only happen with that combination of server and client? Could you try connecting to other versions of Samba and perhaps also from other versions of client?

Changed in samba:
status: New → Incomplete
Revision history for this message
Sebastian Rode (sebastian-ro-deactivatedaccount) wrote :

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!

Changed in samba:
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.