[Bug 314657] [NEW] smbd segfault in assert_uid

[Keith Matthews]

Public bug reported:

Binary package hint: samba

8.04.1  newly installed.  Xeon 5130, 10 GB RAM

samba 3.0.28a-1ubuntu4.7

[Thread debugging using libthread_db enabled]
[New Thread 0x7f97b5ddb700 (LWP 19763)]
0x00007f97b2fe34a5 in waitpid () from /lib/libc.so.6
#0  0x00007f97b2fe34a5 in waitpid () from /lib/libc.so.6
#1  0x00007f97b2f84461 in ?? () from /lib/libc.so.6
#2  0x0000000000613c7b in smb_panic (why=<value optimized out>)
    at lib/util.c:1639
#3  0x0000000000618cf1 in assert_uid (ruid=4294967295, euid=10009)
    at lib/util_sec.c:102
#4  0x00000000004ba5ae in become_id (uid=10009, gid=1009) at smbd/sec_ctx.c:57
#5  0x00000000004ba726 in pop_sec_ctx () at smbd/sec_ctx.c:345
#6  0x00000000004afef9 in unbecome_root () at smbd/uid.c:400
#7  0x00000000005d3e31 in uid_to_sid (psid=0x7fffbddf39d0, uid=0)
    at passdb/lookup_sid.c:1169
#8  0x00000000004bfd3f in create_file_sids (psbuf=0x7fffbddf38f0, 
    powner_sid=0x4d34, pgroup_sid=0x0) at smbd/posix_acls.c:668
#9  0x00000000004c435a in get_nt_acl (fsp=0xae3060, security_info=7, 
    ppdesc=0x7fffbddf3ab8) at smbd/posix_acls.c:2809
#10 0x000000000046e09e in is_visible_file (conn=0xa89a20, 
    dir_path=0xa59180 "./", name=<value optimized out>, pst=0x7fffbddf4480, 
    use_veto=1) at smbd/dir.c:897
#11 0x000000000046e620 in dptr_normal_ReadDirName (dptr=0xa84630, 
    poffset=0x7fffbddf4548, pst=0x7fffbddf4480) at smbd/dir.c:562
#12 0x000000000046e694 in dptr_ReadDirName (dptr=0xa84630, 
    poffset=0x7fffbddf4548, pst=0x7fffbddf4480) at smbd/dir.c:642
#13 0x00000000004a54e4 in get_lanman2_dir_entry (conn=0xa89a20, 
    inbuf=<value optimized out>, outbuf=0xaae4a0 "", 
    path_mask=0x7fffbddf5760 "*", dirtype=23, info_level=514, 
    requires_resume_key=4, dont_descend=0, ppdata=0x7fffbddf5730, 
    base_data=0xad2c30 "p", end_data=0xad7c2f "", space_remaining=12604, 
    out_of_space=0x7fffbddf5754, got_exact_match=0x7fffbddf573c, 
    last_entry_off=0x7fffbddf575c, name_list=0x0, ea_ctx=0x0)
    at smbd/trans2.c:1149
#14 0x00000000004a8b13 in call_trans2findfirst (conn=0xa89a20, 
    inbuf=0xa8e050 "", outbuf=0xaae4a0 "", bufsize=16472, pparams=0xad1de0, 
    total_params=<value optimized out>, ppdata=0xad1df0, total_data=0, 
    max_data_bytes=16384) at smbd/trans2.c:1859
#15 0x00000000004a92ae in handle_trans2 (conn=0xa89a20, state=0xad1c90, 
    inbuf=0xa8e050 "", outbuf=0xaae4a0 "", size=<value optimized out>, 
    bufsize=16472) at smbd/trans2.c:6433
#16 0x00000000004afc6a in reply_trans2 (conn=0xa89a20, inbuf=0xa8e050 "", 
    outbuf=0xaae4a0 "", size=88, bufsize=16472) at smbd/trans2.c:6703
#17 0x00000000004c87ce in switch_message (type=50, inbuf=0xa8e050 "", 
    outbuf=0xaae4a0 "", size=88, bufsize=16472) at smbd/process.c:1004
#18 0x00000000004c9bc2 in smbd_process () at smbd/process.c:1031
#19 0x00000000006c5fad in main (argc=<value optimized out>, 
    argv=0x7fffbddf76e8) at smbd/server.c:1120

Tried purging the package and re-installing, no change.

smb.conf carried over from 7.04/7.10 installation (although rest of
install is new as result of hardware changes).

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
smbd segfault in assert_uid 
https://bugs.launchpad.net/bugs/314657
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.