[Pkg-samba-maint] Bug#424683: samba: Samba child segfaults when scanned using MBSA

[Chris Adams]

Package: samba
Version: 3.0.24-6etch1
Severity: minor


While scanning our domain this morning I noticed that smbd will crash in
api_eventlog_open_eventlog (#4 in the backtrace below) when scanned by
Microsoft's Baseline Security Analyzer. I've marked this as minor because it
doesn't interfere with anything else.

[2007/05/16 11:14:53, 0] lib/util.c:smb_panic(1599)
  PANIC (pid 5495): internal error
[2007/05/16 11:14:53, 0] lib/util.c:log_stack_trace(1706)
  BACKTRACE: 16 stack frames:
   #0 /usr/sbin/smbd(log_stack_trace+0x23) [0x822c253]
   #1 /usr/sbin/smbd(smb_panic+0x46) [0x822c346]
   #2 /usr/sbin/smbd [0x821a51a]
   #3 [0xffffe500]
   #4 /usr/sbin/smbd [0x816b38d]
   #5 /usr/sbin/smbd(api_rpcTNP+0x15f) [0x818b5bf]
   #6 /usr/sbin/smbd(api_pipe_request+0x183) [0x818bba3]
   #7 /usr/sbin/smbd [0x8185ede]
   #8 /usr/sbin/smbd [0x809bced]
   #9 /usr/sbin/smbd [0x809c1dc]
   #10 /usr/sbin/smbd(reply_trans+0x56f) [0x809ce4f]
   #11 /usr/sbin/smbd [0x80ea5c4]
   #12 /usr/sbin/smbd(smbd_process+0x6f8) [0x80eb788]
   #13 /usr/sbin/smbd(main+0x10df) [0x82c36cf]
   #14 /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xc8) [0xf7bd4ea8]
   #15 /usr/sbin/smbd [0x8082b11]

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-amd64
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages samba depends on:
ii  debconf  1.5.11                          Debian configuration management sy
ii  libacl1  2.2.41-1                        Access control list shared library
ii  libattr1 2.4.32-1                        Extended attribute shared library
ii  libc6    2.3.6.ds1-13                    GNU C Library: Shared libraries
ii  libcomer 1.39+1.40-WIP-2006.11.14+dfsg-2 common error description library
ii  libcupsy 1.2.7-4                         Common UNIX Printing System(tm) - 
ii  libgnutl 1.4.4-3                         the GNU TLS library - runtime libr
ii  libkrb53 1.4.4-7etch1                    MIT Kerberos runtime libraries
ii  libldap2 2.1.30-13.3                     OpenLDAP libraries
ii  libpam-m 0.79-4                          Pluggable Authentication Modules f
ii  libpam-r 0.79-4                          Runtime support for the PAM librar
ii  libpam0g 0.79-4                          Pluggable Authentication Modules l
ii  libpopt0 1.10-3                          lib for parsing cmdline parameters
ii  logrotat 3.7.1-3                         Log rotation utility
ii  lsb-base 3.1-23.1                        Linux Standard Base 3.1 init scrip
ii  netbase  4.29                            Basic TCP/IP networking system
ii  procps   1:3.2.7-3                       /proc file system utilities
ii  samba-co 3.0.24-6etch1                   Samba common files used by both th
ii  zlib1g   1:1.2.3-13                      compression library - runtime

Versions of packages samba recommends:
pn  smbldap-tools                 <none>     (no description available)

-- debconf information:
  samba/nmbd_from_inetd:
  samba/run_mode: daemons
  samba/log_files_moved:
  samba/tdbsam: false
  samba/generate_smbpasswd: true