Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-4970

sssd_be dereferences NULL pointer server->common and crashes with assertion error

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • None
    • rhel-7.3
    • sssd
    • Major
    • sst_idm_sssd
    • ssg_idm
    • False
    • Hide

      None

      Show
      None
    • If docs needed, set a value

      Description of problem:

      Core was generated by `/usr/libexec/sssd/sssd_be --domain nwra.com --uid 0 --gid 0 --debug-to-files'.
      Program terminated with signal 11, Segmentation fault.
      #0 ldap_unbind_ext (ld=0x1, sctrls=0x0, cctrls=0x0) at unbind.c:46
      46 assert( LDAP_VALID( ld ) );
      (gdb) up
      #1 0x00007f0ad4dd9ba4 in sdap_handle_release (sh=0x7f0adec05e70)
      at src/providers/ldap/sdap_async.c:110
      110 ldap_unbind_ext(sh->ldap, NULL, NULL);
      (gdb) print sh->ldap
      $1 = (LDAP *) 0x1
      (gdb) print *sh
      $2 = {ldap = 0x1, connected = false, expire_time = 0, page_size = 1000, disable_deref = false,
      sdap_fd_events = 0x0, supported_saslmechs =

      {num_vals = 0, vals = 0x0}, supported_controls = { num_vals = 0, vals = 0x0}, supported_extensions = {num_vals = 0, vals = 0x0}

      , ops = 0x0,
      destructor_lock = true, release_memory = false}
      (gdb) bt
      #0 ldap_unbind_ext (ld=0x1, sctrls=0x0, cctrls=0x0) at unbind.c:46
      #1 0x00007f0ad4dd9ba4 in sdap_handle_release (sh=0x7f0adec05e70)
      at src/providers/ldap/sdap_async.c:110
      #2 sdap_handle_destructor (mem=<optimized out>) at src/providers/ldap/sdap_async.c:79
      #3 0x00007f0ada46d447 in _talloc_free_internal () from /lib64/libtalloc.so.2
      #4 0x00007f0ada466b63 in _talloc_free () from /lib64/libtalloc.so.2
      #5 0x00007f0ada679680 in tevent_req_received (req=0x7f0adec08010) at ../tevent_req.c:247
      #6 0x00007f0ada6796b9 in tevent_req_destructor (req=<optimized out>) at ../tevent_req.c:99
      #7 0x00007f0ada466e80 in _talloc_free () from /lib64/libtalloc.so.2
      #8 0x00007f0ad4dfc235 in sdap_cli_connect_done (subreq=0x7f0adec08010)
      at src/providers/ldap/sdap_async_connection.c:1568
      #9 0x00007f0ada679512 in _tevent_req_error (req=req@entry=0x7f0adec08010, error=error@entry=111,
      location=location@entry=0x7f0ad4e2fee0 "src/providers/ldap/sdap_async_connection.c:158")
      at ../tevent_req.c:167
      #10 0x00007f0ad4df7eb4 in sdap_sys_connect_done (subreq=0x0)
      at src/providers/ldap/sdap_async_connection.c:158
      #11 0x00007f0ada679512 in _tevent_req_error (req=req@entry=0x7f0adebfd160, error=<optimized out>,
      location=location@entry=0x7f0ad4e3a019 "src/util/sss_ldap.c:260") at ../tevent_req.c:167
      #12 0x00007f0ad4e0eac6 in sss_ldap_init_sys_connect_done (subreq=0x0) at src/util/sss_ldap.c:260
      #13 0x00007f0ada679512 in _tevent_req_error (req=<optimized out>, error=<optimized out>,
      location=<optimized out>) at ../tevent_req.c:167
      #14 0x00007f0ada679512 in _tevent_req_error (req=<optimized out>, error=<optimized out>,
      location=<optimized out>) at ../tevent_req.c:167
      #15 0x00007f0ada67dd8b in epoll_event_loop (tvalp=0x7ffe04904f50, epoll_ev=0x7f0adeb94e70)
      at ../tevent_epoll.c:728
      #16 epoll_event_loop_once (ev=<optimized out>, location=<optimized out>) at ../tevent_epoll.c:926
      #17 0x00007f0ada67c257 in std_event_loop_once (ev=0x7f0adeb94c30,
      location=0x7f0ade0153ff "src/util/server.c:716") at ../tevent_standard.c:114
      #18 0x00007f0ada67840d in _tevent_loop_once (ev=ev@entry=0x7f0adeb94c30,
      location=location@entry=0x7f0ade0153ff "src/util/server.c:716") at ../tevent.c:533
      #19 0x00007f0ada6785ab in tevent_common_loop_wait (ev=0x7f0adeb94c30,
      location=0x7f0ade0153ff "src/util/server.c:716") at ../tevent.c:637
      #20 0x00007f0ada67c1f7 in std_event_loop_wait (ev=0x7f0adeb94c30,
      location=0x7f0ade0153ff "src/util/server.c:716") at ../tevent_standard.c:140
      #21 0x00007f0addff7f23 in server_loop (main_ctx=0x7f0adeb96080) at src/util/server.c:716
      #22 0x00007f0ade874b82 in main (argc=8, argv=<optimized out>)
      at src/providers/data_provider_be.c:587

      Version-Release number of selected component (if applicable):
      sssd-1.14.0-43.el7_3.14.x86_64

      How reproducible:
      Only seen once I think.

      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [fo_set_port_status] (0x0100): Marking port 0 of server 'europa.nwra.com' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_server_common_status] (0x0100): Marking server 'ipa-boulder2.nwra.com' as 'name not resolved'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [fo_set_port_status] (0x0100): Marking port 0 of server 'ipa-boulder2.nwra.com' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'IPA' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_server_common_status] (0x0100): Marking server 'ipa2.nwra.com' as 'name not resolved'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'ipa2.nwra.com' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'IPA' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_server_common_status] (0x0100): Marking server 'ipa1.nwra.com' as 'name not resolved'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'ipa1.nwra.com' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'IPA' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_server_common_status] (0x0100): Marking server 'ipa-boulder2.nwra.com' as 'name not resolved'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'ipa-boulder2.nwra.com' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'IPA' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_server_common_status] (0x0100): Marking server 'europa.nwra.com' as 'name not resolved'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'europa.nwra.com' as 'neutral'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'IPA'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [resolve_srv_send] (0x0200): The status of SRV lookup is neutral
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [collapse_srv_lookup] (0x0100): Need to refresh SRV lookup for domain nwra.com
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_ldap._tcp.nwra.com'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'ipa2.nwra.com' in DNS
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_server_common_status] (0x0100): Marking server 'ipa2.nwra.com' as 'name resolved'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'IPA' as 'resolved'
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [be_resolve_server_process] (0x0200): Found address for server ipa2.nwra.com: [10.0.1.76] TTL 86400
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [fo_get_server_hostent] (0x0020): Bug: Trying to get hostent from a name-less server
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [ipa_resolve_callback] (0x0020): FATAL: No hostent available for server (unknown name)
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [sssd_async_connect_done] (0x0020): connect failed [111][Connection refused].
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [sssd_async_socket_init_done] (0x0020): sdap_async_sys_connect request failed: [111]: Connection refused.
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [sss_ldap_init_sys_connect_done] (0x0020): sssd_async_socket_init request failed: [111]: Connection refused.
      (Sun Jun 25 10:56:32 2017) [sssd[be[nwra.com]]] [sdap_sys_connect_done] (0x0020): sdap_async_connect_call request failed: [111]: Connection refused.

            sbose@redhat.com Sumit Bose
            opoplawski Orion Poplawski
            Sumit Bose Sumit Bose
            SSSD QE SSSD QE
            Votes:
            0 Vote for this issue
            Watchers:
            12 Start watching this issue

              Created:
              Updated: