[Pkg-samba-maint] Bug#452542: directory on smbfs listing gives PANIC on the samba server -- lib/util.c:smb_panic(1599)

[Teodor]

Package: samba
Followup-For: Bug #452542


The previous security update (3.0.24-6etch4) does not have this problem,
so this is probably a regression introduced by the latest security
patch.

The smbmount is successful as before. A simple attempt to list the
mounted directory gives the following messages in the samba daemon logs:

#################
[2007/11/23 17:11:17, 1] smbd/service.c:make_connection_snum(950)
  217.156.14.200 (217.156.14.200) connect to service tmp initially as
user teodor (uid=1000, gid=100) (pid 15113)

[2007/11/23 17:11:30, 0] lib/util.c:smb_panic(1599)
  PANIC (pid 15113): push_ascii - dest_len == -1
[2007/11/23 17:11:30, 0] lib/util.c:log_stack_trace(1706)
  BACKTRACE: 12 stack frames:
   #0 /usr/sbin/smbd(log_stack_trace+0x23) [0x822c2b3]
   #1 /usr/sbin/smbd(smb_panic+0x46) [0x822c3a6]
   #2 /usr/sbin/smbd [0x8218812]
   #3 /usr/sbin/smbd [0x80c8ac0]
   #4 /usr/sbin/smbd [0x80caa4e]
   #5 /usr/sbin/smbd(handle_trans2+0x1cf) [0x80cb2af]
   #6 /usr/sbin/smbd(reply_trans2+0x64c) [0x80d101c]
   #7 /usr/sbin/smbd [0x80ea5b4]
   #8 /usr/sbin/smbd(smbd_process+0x6f8) [0x80eb778]
   #9 /usr/sbin/smbd(main+0x10df) [0x82c374f]
   #10 /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xc8) [0xb7c51ea8]
   #11 /usr/sbin/smbd [0x8082b11]
[2007/11/23 17:11:30, 0] lib/util.c:smb_panic(1607)
  smb_panic(): calling panic action [/usr/share/samba/panic-action
15113]
[2007/11/23 17:11:30, 0] lib/util.c:smb_panic(1615)
  smb_panic(): action returned status 0
[2007/11/23 17:11:30, 0] lib/fault.c:dump_core(168)
  unable to change to /var/log/samba/cores/smbdrefusing to dump core
#################

Any hit of Ctrl+C in the console to interrupt the "ls" process will
write something similar with the above message:

[2007/11/23 17:11:55, 1] smbd/service.c:make_connection_snum(950)
  217.156.14.200 (217.156.14.200) connect to service tmp initially as
user teodor (uid=1000, gid=100) (pid 15165)
[2007/11/23 17:11:55, 0] lib/util.c:smb_panic(1599)
  PANIC (pid 15165): push_ascii - dest_len == -1
[2007/11/23 17:11:55, 0] lib/util.c:log_stack_trace(1706)
  BACKTRACE: 12 stack frames:
   #0 /usr/sbin/smbd(log_stack_trace+0x23) [0x822c2b3]
   #1 /usr/sbin/smbd(smb_panic+0x46) [0x822c3a6]
   #2 /usr/sbin/smbd [0x8218812]
   #3 /usr/sbin/smbd [0x80c8ac0]
   #4 /usr/sbin/smbd [0x80caa4e]
   #5 /usr/sbin/smbd(handle_trans2+0x1cf) [0x80cb2af]
   #6 /usr/sbin/smbd(reply_trans2+0x64c) [0x80d101c]
   #7 /usr/sbin/smbd [0x80ea5b4]
   #8 /usr/sbin/smbd(smbd_process+0x6f8) [0x80eb778]
   #9 /usr/sbin/smbd(main+0x10df) [0x82c374f]
   #10 /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xc8) [0xb7c51ea8]
   #11 /usr/sbin/smbd [0x8082b11]
[2007/11/23 17:11:55, 0] lib/util.c:smb_panic(1607)
  smb_panic(): calling panic action [/usr/share/samba/panic-action
15165]
[2007/11/23 17:11:55, 0] lib/util.c:smb_panic(1615)
  smb_panic(): action returned status 0
[2007/11/23 17:11:55, 0] lib/fault.c:dump_core(168)
  unable to change to /var/log/samba/cores/smbdrefusing to dump core


I've installed the 'samba-dbg' package but the message is the same, no
more information is provided.


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (990, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages samba depends on:
ii  debconf  1.5.11                          Debian configuration management sy
ii  libacl1  2.2.41-1                        Access control list shared library
ii  libattr1 2.4.32-1                        Extended attribute shared library
ii  libc6    2.3.6.ds1-13etch2               GNU C Library: Shared libraries
ii  libcomer 1.39+1.40-WIP-2006.11.14+dfsg-2 common error description library
ii  libcupsy 1.2.7-4etch1                    Common UNIX Printing System(tm) - 
ii  libgnutl 1.4.4-3                         the GNU TLS library - runtime libr
ii  libkrb53 1.4.4-7etch4                    MIT Kerberos runtime libraries
ii  libldap2 2.1.30-13.3                     OpenLDAP libraries
ii  libpam-m 0.79-4                          Pluggable Authentication Modules f
ii  libpam-r 0.79-4                          Runtime support for the PAM librar
ii  libpam0g 0.79-4                          Pluggable Authentication Modules l
ii  libpopt0 1.10-3                          lib for parsing cmdline parameters
ii  logrotat 3.7.1-3                         Log rotation utility
ii  lsb-base 3.1-23.2etch1                   Linux Standard Base 3.1 init scrip
ii  netbase  4.29                            Basic TCP/IP networking system
ii  procps   1:3.2.7-3                       /proc file system utilities
ii  samba-co 3.0.24-6etch4                   Samba common files used by both th
ii  zlib1g   1:1.2.3-13                      compression library - runtime

Versions of packages samba recommends:
pn  smbldap-tools                 <none>     (no description available)

-- debconf information:
  samba/run_mode: daemons
  samba/tdbsam: false
  samba/generate_smbpasswd: true