#2611 sssd_be dumping core if enumeration times out
Closed: Fixed Opened by jhrozek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 6): Bug 1194367

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:
sssd_be segfaulting,
(gdb) bt
#0  0x00007fe0c00b1625 in raise (sig=6) at
../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00007fe0c00b2e05 in abort () at abort.c:92
#2  0x00007fe0c3c9fc3c in talloc_abort (reason=0x7fe0c3ca5348 "Bad talloc magic
value - access after free") at ../talloc.c:317
#3  0x00007fe0c3c9fdd8 in talloc_abort_access_after_free (ptr=<value optimized
out>) at ../talloc.c:336
#4  talloc_chunk_from_ptr (ptr=<value optimized out>) at ../talloc.c:357
#5  talloc_get_name (ptr=<value optimized out>) at ../talloc.c:1153
#6  0x00007fe0c3ca27eb in _talloc_get_type_abort (ptr=0x65a480,
name=0x7fe0a42810e8 "struct tevent_req",
    location=0x7fe0a4281640 "src/providers/ldap/ldap_id_enum.c:157") at
../talloc.c:1206
#7  0x00007fe0a4241ab1 in ldap_enumeration_done (subreq=0x65a640) at
src/providers/ldap/ldap_id_enum.c:156
#8  0x00007fe0a424340c in sdap_dom_enum_ex_svcs_done (subreq=0x0) at
src/providers/ldap/sdap_async_enum.c:494
#9  0x00007fe0c3eabbde in tevent_req_finish (req=<value optimized out>,
error=<value optimized out>, location=<value optimized out>)
    at ../tevent_req.c:110
#10 _tevent_req_error (req=<value optimized out>, error=<value optimized out>,
location=<value optimized out>) at ../tevent_req.c:128
#11 0x00007fe0a426e5b2 in enum_services_op_done (subreq=0x0) at
src/providers/ldap/sdap_async_services.c:620
#12 0x00007fe0c3eabbde in tevent_req_finish (req=<value optimized out>,
error=<value optimized out>, location=<value optimized out>)
    at ../tevent_req.c:110
#13 _tevent_req_error (req=<value optimized out>, error=<value optimized out>,
location=<value optimized out>) at ../tevent_req.c:128
#14 0x00007fe0a426ee24 in sdap_get_services_process (subreq=0x0) at
src/providers/ldap/sdap_async_services.c:227
#15 0x00007fe0a4251863 in sdap_get_generic_ext_done (op=<value optimized out>,
reply=<value optimized out>,
    error=<value optimized out>, pvt=<value optimized out>) at
src/providers/ldap/sdap_async.c:1481
#16 0x00007fe0a4253e2a in sdap_process_message (ev=<value optimized out>,
pvt=<value optimized out>)
    at src/providers/ldap/sdap_async.c:374
#17 sdap_process_result (ev=<value optimized out>, pvt=<value optimized out>)
at src/providers/ldap/sdap_async.c:213
#18 0x00007fe0c3eaec91 in tevent_common_loop_timer_delay (ev=0x626590) at
../tevent_timed.c:341
#19 0x00007fe0c3eafcbb in epoll_event_loop_once (ev=0x626590, location=<value
optimized out>) at ../tevent_epoll.c:916
#20 0x00007fe0c3eae2e6 in std_event_loop_once (ev=0x626590,
location=0x7fe0c40f15d5 "src/util/server.c:602")
    at ../tevent_standard.c:112
#21 0x00007fe0c3eaa49d in _tevent_loop_once (ev=0x626590,
location=0x7fe0c40f15d5 "src/util/server.c:602") at ../tevent.c:530
#22 0x00007fe0c3eaa51b in tevent_common_loop_wait (ev=0x626590,
location=0x7fe0c40f15d5 "src/util/server.c:602") at ../tevent.c:634
#23 0x00007fe0c3eae256 in std_event_loop_wait (ev=0x626590,
location=0x7fe0c40f15d5 "src/util/server.c:602")
    at ../tevent_standard.c:138
#24 0x00007fe0c40df9c3 in server_loop (main_ctx=0x627890) at
src/util/server.c:602
#25 0x000000000040a286 in main (argc=4, argv=<value optimized out>) at
src/providers/data_provider_be.c:2856
Version-Release number of selected component (if applicable):
sssd-common-1.11.6-30.el6_6.3
How reproducible:
intermittently (at customers environment)
Steps to Reproduce:
1.
2.
3.
Actual results:
sssd_be segfaults
Expected results:
sssd_be should not segfault
Additional info:

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
owner: somebody => pbrezina
review: True => 0
selected: =>
testsupdated: => 0

Pavel, can you send your memory context patch for review?

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.12.5

Fields changed

priority: major => critical
summary: sssd_be dumping core => sssd_be dumping core if enumeration times out

Fields changed

patch: 0 => 1
status: new => assigned

  • master: 725bb2a9901c4f673b107ed179f5d68ec443ca63
  • sssd-1-12: 81bb9be1ae0b2a4ebe960f136a52576abcdfbbac
  • sssd-1-11: c34ac0da2396205200095a1223c3aec02c882d07

resolution: => fixed
status: assigned => closed

The same crash occurred on fedora-20 3 weeks ago.

https://retrace.fedoraproject.org/faf/problems/771556/

Metadata Update from @jhrozek:
- Issue assigned to pbrezina
- Issue set to the milestone: SSSD 1.12.5

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3652

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata