Fwd: Segfault in Samba

[Eamonn Sullivan]

Here's the output of the latest segfault in Samba. It seems to be
happening every hour or half hour. I have a very simple setup:

One directory, shared read/write to guest (nobody) on the Ubuntu box.
The Ubuntu box connects to various shares on the PC running Windows
XP. This has been happening faultlessly for weeks. Problems developed
after the latest Warty update, which included a new kernel.

This is in my /etc/samba/smb.conf: 

        socket options = TCP_NODELAY
        obey pam restrictions = yes
        username map = /etc/samba/user.map
        null passwords = yes
        encrypt passwords = yes
        public = yes
        passwd program = /usr/bin/passwd %u
        passdb backend = tdbsam guest
        wins support = true
        dns proxy = no
        netbios name = gandalf
        writeable = yes
        server string = %h (Samba, Ubuntu)
        invalid users = root
        workgroup = SULLIVAN
        os level = 20
        syslog = 0
        security = share
        guest only = yes
        panic action = /usr/share/samba/panic-action %d
        max log size = 1000

[... lots of comments ...]

[shared]
        invalid users =
        create mode = 766
        path = /home/shared
        directory mode = 766

There are no messages in /var/log/messages during the segfaults.
Here's log.nmbd just before the crash:

[2004/12/19 20:15:08, 0]
nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(353)
  find_domain_master_name_query_fail:
  Unable to find the Domain Master Browser name SULLIVAN<1b> for the
workgroup SULLIVAN.
  Unable to sync browse lists in this workgroup.

Here's where the crash occurs, in log.192.168.0.2 (the Windows XP PC): 

  192.168.0.2 (192.168.0.2) connect to service shared initially as
user nobody (uid=65534, gid=65534) (pid 28281)
[2004/12/19 20:07:25, 0] lib/fault.c:fault_report(36)
  ===============================================================
[2004/12/19 20:07:25, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 28281 (3.0.7-Ubuntu)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/12/19 20:07:25, 0] lib/fault.c:fault_report(39)
  ===============================================================
[2004/12/19 20:07:25, 0] lib/util.c:smb_panic2(1456)
  smb_panic(): calling panic action [/usr/share/samba/panic-action 28281]
/etc/samba/gdbcommands:1: Error in sourced command file:
Previous frame inner to this frame (corrupt stack?)

I suspect I've screwed up a configuration somewhere. Any ideas anyone?  




---------- Forwarded message ----------
From: root <root at localhost.localdomain>
Date: Sun, 19 Dec 2004 20:07:25 +0000 (GMT)
Subject: Segfault in Samba
To: root at localhost.localdomain


The Samba 'panic action' script, /usr/share/samba/panic-action,
was called for pid 28281 (/usr/sbin/smbd).

Below is a backtrace for this process generated with gdb, which shows
the state of the program at the time the error occured.  You are
encouraged to submit this information as a bug report to Debian.  For
information about the procedure for submitting bug reports , please see
http://www.debian.org/Bugs/Reporting or the reportbug(1) manpage.

(no debugging symbols found)...Using host libthread_db library
"/lib/tls/i686/cmov/libthread_db.so.1".
(no debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...0xffffe410
in __kernel_vsyscall ()
#0  0xffffe410 in __kernel_vsyscall ()
#1  0x40231e43 in waitpid () from /lib/tls/i686/cmov/libc.so.6
#2  0x401c8c36 in system () from /lib/tls/i686/cmov/libc.so.6
#3  0x081c2ccf in smb_panic2 ()
#4  0x081c2c5d in smb_panic ()
#5  0x081b1ec2 in dbgtext ()
#6  <signal handler called>
#7  0x401fb97b in mallopt () from /lib/tls/i686/cmov/libc.so.6
#8  0x083d1e18 in ?? ()
#9  0x402b98a8 in __after_morecore_hook () from /lib/tls/i686/cmov/libc.so.6
#10 0x083b5020 in ?? ()
#11 0x402b9894 in __after_morecore_hook () from /lib/tls/i686/cmov/libc.so.6
#12 0x402b9878 in __after_morecore_hook () from /lib/tls/i686/cmov/libc.so.6
#13 0x402b8edc in ?? () from /lib/tls/i686/cmov/libc.so.6
#14 0x00001870 in ?? ()
#15 0x00000001 in ?? ()
#16 0x0000186c in ?? ()
#17 0x401fb1a4 in mallopt () from /lib/tls/i686/cmov/libc.so.6
#18 0x402b9860 in __after_morecore_hook () from /lib/tls/i686/cmov/libc.so.6
#19 0x00000000 in ?? ()
#20 0x00000000 in ?? ()
#21 0x00000000 in ?? ()
#22 0x00000000 in ?? ()
#23 0x00000000 in ?? ()
#24 0x00000000 in ?? ()
#25 0x00000067 in ?? ()
#26 0x00001870 in ?? ()
#27 0x402b9860 in __after_morecore_hook () from /lib/tls/i686/cmov/libc.so.6
#28 0x402b8edc in ?? () from /lib/tls/i686/cmov/libc.so.6
#29 0x402b9860 in __after_morecore_hook () from /lib/tls/i686/cmov/libc.so.6
#30 0x00000001 in ?? ()
#31 0x0000186c in ?? ()
#32 0x401fa503 in malloc () from /lib/tls/i686/cmov/libc.so.6
#33 0x402b9860 in __after_morecore_hook () from /lib/tls/i686/cmov/libc.so.6
#34 0x0000186c in ?? ()
#35 0x00000005 in ?? ()
#36 0x00000001 in ?? ()
#37 0x082b9d74 in global_client_caps ()
#38 0xbffff2f8 in ?? ()
#39 0x081c8131 in hash_table_init ()