Bug#257880: Nautilus crashes when mounting smb drive

[Alex Roitman]

--fUYQa+Pmc3FrFX/N
Content-Type: text/plain; charset=ISO-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

I can cofirm this: mounting the smb share leads
to a kernel oops _only_if_ nautilus is running.

Below is a couple of oops'es from my system,
both preceded with an smb_lookup message which
is obviously nautilus-related (.Trash-*).

Please let me know if I can be of further assistance,
Alex

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D  Oops 1 =3D=3D=3D=3D=3D=3D=3D=3D
smb_lookup: find //.Trash-shura failed, error=3D-5
Unable to handle kernel NULL pointer dereference at virtual address 00000000
 printing eip:
00000000
*pde =3D 00000000
Oops: 0000 [#1]
PREEMPT
CPU:    0
EIP:    0060:[<00000000>]    Not tainted
EFLAGS: 00010246   (2.6.6)
EIP is at 0x0
eax: de589a10   ebx: d445df30   ecx: c015740f   edx: dfcfa454
esi: d445dfa0   edi: c1104a80   ebp: c8285d80   esp: d445defc
ds: 007b   es: 007b   ss: 0068
Process nautilus (pid: 2259, threadinfo=3Dd445c000 task=3Dc2694e30)
Stack: c01d5077 c8285d80 d445dfa0 c015740f d445df30 00000000 00000002 00000=
004
       c8257eb0 00000000 c8254000 dfcfa454 d8440a54 00000000 0005367c c8285=
d80
       00000000 00000000 c8254000 00000002 00000000 00000000 00000001 00000=
004
Call Trace:
 [<c01d5077>] smb_readdir+0x3f3/0x584
 [<c015740f>] filldir64+0x0/0xeb
 [<c015713e>] vfs_readdir+0x86/0x98
 [<c015740f>] filldir64+0x0/0xeb
 [<c015756b>] sys_getdents64+0x71/0xab
 [<c015740f>] filldir64+0x0/0xeb
 [<c0103f2f>] syscall_call+0x7/0xb

Code:  Bad EIP value.

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D  Oops 2 =3D=3D=3D=3D=3D=3D=3D=3D
smb_lookup: find //.Trash-shura failed, error=3D-5
Unable to handle kernel NULL pointer dereference at virtual address 00000000
 printing eip:
00000000
*pde =3D 00000000
Oops: 0000 [#1]
PREEMPT
CPU:    0
EIP:    0060:[<00000000>]    Not tainted
EFLAGS: 00010246   (2.6.6)
EIP is at 0x0
eax: dd194c90   ebx: c820df30   ecx: c015740f   edx: dfa90954
esi: c820dfa0   edi: c10a2720   ebp: cf0d0380   esp: c820defc
ds: 007b   es: 007b   ss: 0068
Process nautilus (pid: 19522, threadinfo=3Dc820c000 task=3Dcd815930)
Stack: c01d5077 cf0d0380 c820dfa0 c015740f c820df30 00000000 00000002 00000=
004
       d3e07130 00000000 c5139000 dfa90954 d92eda54 00000000 fc7f794f cf0d0=
380
       00000000 00000000 c5139000 00000002 00000000 00000000 00000001 00000=
004
Call Trace:
 [smb_readdir+1011/1412] smb_readdir+0x3f3/0x584
 [filldir64+0/235] filldir64+0x0/0xeb
 [vfs_readdir+134/152] vfs_readdir+0x86/0x98
 [filldir64+0/235] filldir64+0x0/0xeb
 [sys_getdents64+113/171] sys_getdents64+0x71/0xab
 [filldir64+0/235] filldir64+0x0/0xeb
 [syscall_call+7/11] syscall_call+0x7/0xb

Code:  Bad EIP value.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

--=20
Alexander Roitman   http://ebner.neuroscience.umn.edu/people/alex.html
Dept. of Neuroscience, Lions Research Building
2001 6th Street SE, Minneapolis, MN  55455
Tel (612) 625-7566   FAX (612) 626-9201

--fUYQa+Pmc3FrFX/N
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQBBEmOP/4Mm4cNxJ9MRAmI7AJ9gWQj46nnilP7EPbWoP1C5ICgvOwCfbdEZ
OhLREl5RuKkTaJBVKEik0UY=
=yImz
-----END PGP SIGNATURE-----

--fUYQa+Pmc3FrFX/N--