Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-67283

krb5: circular include and includedir cause Segfault

    • No
    • Moderate
    • rhel-sst-idm-ipa
    • ssg_idm
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat Enterprise Linux
    • None
    • None
    • None
    • None

      What were you trying to do that didn't work?

      When there are circular include or includedir, kerberos related task causes Segfault.

      What is the impact of this issue to you?

      Unable to use Kerberos functions. Failed to install IPA clients and servers.

      Please provide the package NVR for which the bug is seen:

      krb5-libs-1.18.2-27.el8_10.x86_64

      How reproducible is this bug?:

      Always

      Steps to reproduce

      1. Have 2 following configuration files:
        /etc/krb5.conf
        includedir /etc/krb5.conf.d/
        
        [libdefaults]
        
        [realms]
        
        

      /etc/krb5.conf.d/krb5.conf

      includedir /etc/krb5.conf.d/
      
      [libdefaults]
      
      
      1. klist

      Expected results

      Error message shows something like

      Error: circular include or includedir detected at file /etc/krb5.conf.d/krb5.conf
      

      Or implement a configuration file checker.

      Actual results

      Segfault

      core_backtrace

      {   "signal": 11
      ,   "executable": "/usr/bin/klist"
      ,   "only_crash_thread": true
      ,   "stacktrace":
            [ {   "crash_thread": true
              ,   "frames":
                    [ {   "address": 140350022383192
                      ,   "build_id": "8934d9b23eca18325469997e54dd3bee8730155d"
                      ,   "build_id_offset": 579160
                      ,   "function_name": "parse_include_dir"
                      ,   "file_name": "/usr/lib64/libkrb5.so.3.3"
                      }
                    , {   "address": 140350022381841
                      ,   "build_id": "8934d9b23eca18325469997e54dd3bee8730155d"
                      ,   "build_id_offset": 577809
                      ,   "function_name": "parse_file"
                      ,   "file_name": "/usr/lib64/libkrb5.so.3.3"
                      }
                    , {   "address": 140350022382877
                      ,   "build_id": "8934d9b23eca18325469997e54dd3bee8730155d"
                      ,   "build_id_offset": 578845
                      ,   "function_name": "parse_include_file"
                      ,   "file_name": "/usr/lib64/libkrb5.so.3.3"
                      }
                    , {   "address": 140350022383192
                      ,   "build_id": "8934d9b23eca18325469997e54dd3bee8730155d"
                      ,   "build_id_offset": 579160
                      ,   "function_name": "parse_include_dir"
                      ,   "file_name": "/usr/lib64/libkrb5.so.3.3"
                      }
                    , {   "address": 140350022381841
                      ,   "build_id": "8934d9b23eca18325469997e54dd3bee8730155d"
                      ,   "build_id_offset": 577809
                      ,   "function_name": "parse_file"
                      ,   "file_name": "/usr/lib64/libkrb5.so.3.3"
                      }
      ....
      
      

      .h3 Workaround

      Remove the confronting files.
       

              jrische@redhat.com Julien Rische
              rhn-support-dchen Ding Yi Chen
              Julien Rische Julien Rische
              Michal Polovka Michal Polovka
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: