[Bug 1015935] Re: SWAT segfaults when trying to view full configuration

[Marc Cluet]

Can reproduce with a fresh Precise install from CD and selecting "samba" at the install time.
Can't reproduce installing samba directly, looks like a failure related to the added packages "samba, cifs-utils, smbclient,
smbfs, winbind"
This looks like an auth interaction bug between different packages

** Changed in: samba (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1015935

Title:
  SWAT segfaults when trying to view full configuration

Status in Samba:
  Unknown
Status in “samba” package in Ubuntu:
  Confirmed

Bug description:
  When running swat on a 32bit 12.04 install, swat segfaults when the
  user clicks on the "Full View" button in the configuration menu. This
  only happens on the 32bit install, the 64bit install seems fine.

  This was reported to upstream under
  https://bugzilla.samba.org/show_bug.cgi?id=8999 but can only be
  reproduced with the distro packages.

  swat crashes with the following backtrace (sorry for the missing debug
  symbols, the samba-dbg package doesn't seem to help gdb getting debug
  symbols for swat):

  (gdb) bt
  #0  0xb72340c0 in ?? ()
  #1  0xb7d7923c in _talloc_free () from /usr/lib/i386-linux-gnu/libtalloc.so.2
  #2  0x80215875 in smb_iconv_close ()
  #3  0x80204d65 in ?? ()
  #4  0x802051d8 in smb_iconv_convenience_reinit ()
  #5  0x801f2bf5 in init_iconv ()
  #6  0x801f2c32 in lazy_initialize_conv ()
  #7  0x801f35e5 in convert_string_talloc ()
  #8  0x80074c99 in cgi_load_variables ()
  #9  0x80071e3c in main ()

  A relatively straightforward way to reproduce the crash in gdb is running gdb swat, and then typing in
  GET /viewconfig HTTP/1.1
  Authorization: Basic <base64 of user:pass>

  then grab the xsrf and xsrf_time values in the form displayed...

  GET /viewconfig?full_view=Full+View&xsrf=<xsrf>&xsrf_time=<xsrf_time> HTTP/1.1
  Authorization: Basic <base64 of user:pass>

  and the segfault happens.
  With the current v3-6-test git HEAD from the samba git, this doesn't happen. The last time this code was touched upstream was in 2009, so I'm not sure a code change caused this.

  You cannot reproduce the crash if you start swat with -a to skip the
  authentication logic, so you need to set up a root password for this
  to work.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: swat 2:3.6.3-2ubuntu2.3
  ProcVersionSignature: Ubuntu 3.2.0-25.40-generic-pae 3.2.18
  Uname: Linux 3.2.0-25-generic-pae i686
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: i386
  Date: Wed Jun 20 13:41:39 2012
  InstallationMedia: Ubuntu-Server 12.04 LTS "Precise Pangolin" - Release i386 (20120424.1)
  NmbdLog:
   Packet send failed to 10.0.2.255(138) ERRNO=Invalid argument
     Packet send failed to 10.0.2.255(138) ERRNO=Invalid argument
  OtherFailedConnect: Yes
  ProcEnviron:
   LANGUAGE=en_IE:en
   TERM=linux
   PATH=(custom, no user)
   LANG=en_IE.UTF-8
   SHELL=/bin/bash
  SambaServerRegression: Yes
  SmbConfIncluded: Yes
  SourcePackage: samba
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1015935/+subscriptions