Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-16875

libnss_winbind causes memory corruption

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • rhel-9.4
    • rhel-9.2.0
    • samba
    • None
    • samba-4.19.3-100.el9
    • None
    • Critical
    • rhel-sst-idm-sssd
    • ssg_idm
    • 0
    • QE ack, Dev ack
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat Enterprise Linux
    • None
    • x86_64
    • None

      What were you trying to do that didn't work?

      After finishing Linux Virtual Delivery Agent setup, when we tried to launch a remote gnome desktop, the desktop couldn't work:

      Then we found many service activation failures in /var/log/messages as following

       

      Nov 20 14:14:08 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.a11y.Bus' requested by ':1.69' (uid=2001105 pid=19938 comm="/usr/libexec/evolution-data-server/evolution-alarm" label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:08 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.a11y.Bus' failed: Process org.a11y.Bus exited, reason unknown
Nov 20 14:14:08 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.gtk.vfs.Daemon' requested by ':1.70' (uid=2001105 pid=19938 comm="/usr/libexec/evolution-data-server/evolution-alarm" label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:08 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.gtk.vfs.Daemon' failed: Process org.gtk.vfs.Daemon exited, reason unknown
Nov 20 14:14:08 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.gnome.evolution.dataserver.Sources5' requested by ':1.71' (uid=2001105 pid=19938 comm="/usr/libexec/evolution-data-server/evolution-alarm" label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:08 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.gnome.evolution.dataserver.Sources5' failed: Process org.gnome.evolution.dataserver.Sources5 exited, reason unknown
Nov 20 14:14:09 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.gtk.vfs.Daemon' requested by ':1.72' (uid=2001105 pid=19935 comm="/usr/libexec/tracker-miner-fs-3 " label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:09 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.gtk.vfs.Daemon' failed: Process org.gtk.vfs.Daemon exited, reason unknown
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.gtk.vfs.Daemon' requested by ':1.73' (uid=2001105 pid=19935 comm="/usr/libexec/tracker-miner-fs-3 " label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.gtk.vfs.Daemon' failed: Process org.gtk.vfs.Daemon exited, reason unknown
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.gtk.vfs.UDisks2VolumeMonitor' requested by ':1.73' (uid=2001105 pid=19935 comm="/usr/libexec/tracker-miner-fs-3 " label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.gtk.vfs.UDisks2VolumeMonitor' failed: Process org.gtk.vfs.UDisks2VolumeMonitor exited, reason unknown
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.gtk.vfs.GoaVolumeMonitor' requested by ':1.73' (uid=2001105 pid=19935 comm="/usr/libexec/tracker-miner-fs-3 " label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.gtk.vfs.GoaVolumeMonitor' failed: Process org.gtk.vfs.GoaVolumeMonitor exited, reason unknown
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.gtk.vfs.GPhoto2VolumeMonitor' requested by ':1.73' (uid=2001105 pid=19935 comm="/usr/libexec/tracker-miner-fs-3 " label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.gtk.vfs.GPhoto2VolumeMonitor' failed: Process org.gtk.vfs.GPhoto2VolumeMonitor exited, reason unknown
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.gtk.vfs.MTPVolumeMonitor' requested by ':1.73' (uid=2001105 pid=19935 comm="/usr/libexec/tracker-miner-fs-3 " label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:11 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.gtk.vfs.MTPVolumeMonitor' failed: Process org.gtk.vfs.MTPVolumeMonitor exited, reason unknown
Nov 20 14:14:15 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activating service name='org.freedesktop.Tracker3.Miner.Extract' requested by ':1.73' (uid=2001105 pid=19935 comm="/usr/libexec/tracker-miner-fs-3 " label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Nov 20 14:14:15 rhel9 dbus-daemon[19517]: [session uid=2001105 pid=19515] Activated service 'org.freedesktop.Tracker3.Miner.Extract' failed: Process org.freedesktop.Tracker3.Miner.Extract exited, reason unknown

       

      and core dump files caused by dbus-daemon:
      Core was generated by `/usr/bin/dbus-daemon --syslog --fork --print-pid 6 --print-address 8 --session'.
      Program terminated with signal SIGABRT, Aborted.
      #0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
      44          return INTERNAL_SYSCALL_ERROR_P (ret) ? INTERNAL_SYSCALL_ERRNO (ret) : 0;
      Missing separate debuginfos, use: dnf debuginfo-install libgcrypt-1.10.0-10.el9_2.x86_64 p11-kit-0.24.1-2.el9.x86_64
      (gdb) bt
      #0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
      #1  0x00007f55dbca15b3 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78
      #2  0x00007f55dbc54d06 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
      #3  0x00007f55dbc287f3 in __GI_abort () at abort.c:79
      #4  0x00007f55dbc29130 in __libc_message (fmt=<optimized out>, fmt@entry=0x7f55dbdbb6a8 "%s\n") at ../sysdeps/posix/libc_fatal.c:150
      #5  0x00007f55dbcab617 in malloc_printerr (str=str@entry=0x7f55dbdb91e7 "free(): invalid pointer") at malloc.c:5515
      #6  0x00007f55dbcacecc in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:4306
      #7  0x00007f55dbcaf955 in _GI__libc_free (mem=mem@entry=0x7f55dbf83188 <selinux_page_size>) at malloc.c:3258
      #8  0x00007f55db8e56a9 in wb_atfork_child () at ../../nsswitch/wb_common.c:78
      #9  0x00007f55dbd19009 in __run_postfork_handlers (who=who@entry=atfork_run_child, do_locking=do_locking@entry=false, lastrun=lastrun@entry=4)
          at register-atfork.c:186
      #10 0x00007f55dbd1877d in __libc_fork () at fork.c:109
      #11 0x0000557179a26073 in _dbus_spawn_async_with_babysitter (child_setup=0x557179a1db10 <child_setup>, error=0x7ffefc54d460, user_data=0x55717a9d4810, 
          flags=DBUS_SPAWN_REDIRECT_OUTPUT, env=0x55717a9f91c0, argv=0x55717a9f2970, log_name=0x55717a9f6dd0 "org.a11y.Bus", sitter_p=0x55717a9f59a8)
          at ../dbus/../../dbus/dbus-spawn.c:1365
      #12 bus_activation_activate_service (activation=0x55717a9d4810, connection=0x55717a9f6320, transaction=<optimized out>, auto_activation=<optimized out>, 
          activation_message=<optimized out>, service_name=0x55717a9f6dd0 "org.a11y.Bus", error=0x7ffefc54d560) at ../../bus/activation.c:2226
      #13 0x0000557179a2fc58 in bus_activation_activate_service (error=0x7ffefc54d560, service_name=0x55717a9f6dd0 "org.a11y.Bus", activation_message=0x55717a9f6ce0, 
          auto_activation=1, transaction=0x55717a9e76f0, connection=0x55717a9f6320, activation=<optimized out>) at ../../bus/activation.c:1766
      #14 bus_dispatch (message=0x55717a9f6ce0, connection=0x55717a9f6320) at ../../bus/dispatch.c:438
      #15 bus_dispatch_message_filter (connection=0x55717a9f6320, message=0x55717a9f6ce0, user_data=<optimized out>) at ../../bus/dispatch.c:548
      #16 0x00007f55dc0af2f5 in dbus_connection_dispatch () from /lib64/libdbus-1.so.3
      #17 0x0000557179a18a7d in _dbus_loop_dispatch (loop=<optimized out>) at ../dbus/../../dbus/dbus-mainloop.c:532
      #18 _dbus_loop_dispatch (loop=0x55717a9d0d30) at ../dbus/../../dbus/dbus-mainloop.c:513
      #19 _dbus_loop_iterate (block=1, loop=0x55717a9d0d30) at ../dbus/../../dbus/dbus-mainloop.c:862
      #20 _dbus_loop_run (loop=0x55717a9d0d30) at ../dbus/../../dbus/dbus-mainloop.c:888
      #21 main (argc=<optimized out>, argv=<optimized out>) at ../../bus/main.c:720

      Please provide the package NVR for which bug is seen:

      samba-winbind-modules-4.18.6-101.el9_3.x86_64

      How reproducible:

      Steps to reproduce

      1. Make sure SELinux is enabled or permissive(Only when SELinux is disabled, this issue won't occur)
      2. Make sure machine has joined domain by winbind and samba
      3. Make sure samba-winbind has been upgraded to 4.18.6(4.17.5 works fine)
      4. launch a remote gnome desktop(Launching a local desktop won't cause this issue.)

      Expected results

      Remote gnome desktop works fine

      Actual results

      Remote gnome desktop cannot work

        1. image-2023-11-20-13-53-01-019.png
          image-2023-11-20-13-53-01-019.png
          35 kB

              anschnei@redhat.com Andreas Schneider
              ctxnanjingeng Yuan Zhang (Inactive)
              Andreas Schneider Andreas Schneider
              Denis Karpelevich Denis Karpelevich
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: