Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-136184

SIGSEGV in Freeradius due incorrect healthcheck handling

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • rhel-9.7
    • freeradius
    • None
    • Yes
    • Low
    • rhel-idm-ipa
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      enabling healthcheck causes the server to segfault consistently every ~1.5 hours

       

      What is the impact of this issue to you?

      service going down

      Please provide the package NVR for which the bug is seen:

      freeradius.x86_64 3.0.27-1.el9 @rhel-9-for-x86_64-appstream-rpms

      How reproducible is this bug?:

      always

      Steps to reproduce

      1. enable keepalive/status checks (either globally security { status_server = yes } or per home_server { status_check = status-server } in proxy.conf
      2. wait for ~1.5 hours, on next check we get

      22:02:18 $ (728813)   3GPP-MS-Time-Zone = 0x4000
      22:02:18 $ (728813)   3GPP-Negotiated-DSCP = 0
      22:02:18 $ (728813)   NAS-IP-Address := 139.156.122.122
      22:02:18 $ (728813)   Proxy-State = 0x3630
      22:02:18 $ No outstanding request was found for Accounting-Response packet from host 192.168.5.2 port 1813 - ID 176
      22:02:18 $ (728750) Marking home server 192.168.4.2 port 1813 alive
      22:02:18 $ (728750) Received response to status check 728750 ID 254 (1 in current sequence)
      22:02:18 $ Segmentation fault

      1. Downgrade to freeradius x86_64 3.0.21-44.el9_6 rhel-9-for-x86_64-appstream-rpms fixes the behaviour, but leaves without TLS 1.3

      Expected results

      servers is working 

      Actual results

      server segfaulting

      Additional info

      This seems to fix this issue: https://github.com/FreeRADIUS/freeradius-server/commit/3448cd0dc1c6fb7842cda2bb1223256062b39ff7 but was never merged

      Upstream bug closed wontfix for 3.0.x: https://github.com/FreeRADIUS/freeradius-server/issues/5697 

              antorres@redhat.com Antonio Torres
              rhn-support-asharov Aleksandr Sharov
              Antonio Torres Antonio Torres
              Michal Polovka Michal Polovka
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: