[Pkg-samba-maint] Bug#570099: same thing happening in 2:3.5.0~rc2~dfsg-1

[EmTeedee]

Package: samba
Version: 2:3.5.0~rc2~dfsg-1

got the exact same thing happening in samba 2:3.5.0~rc2~dfsg-1

gdb:

[Thread debugging using libthread_db enabled]
[New Thread 0xb7b536e0 (LWP 6391)]
0xffffe424 in __kernel_vsyscall ()
#0  0xffffe424 in __kernel_vsyscall ()
#1  0xb7db7193 in waitpid () from /lib/i686/cmov/libc.so.6
#2  0xb7d578eb in ?? () from /lib/i686/cmov/libc.so.6
#3  0xb7eb437d in system () from /lib/i686/cmov/libpthread.so.0
#4  0x083b437d in smb_panic (why=0x8817ada "internal error") at lib/util.c:1471
#5  0x083a1efe in sig_fault (sig=11) at lib/fault.c:52
#6  <signal handler called>
#7  0xb7e95b76 in ?? () from /usr/lib/libtalloc.so.2
#8  0x09eebf98 in ?? ()
#9  0x00000004 in ?? ()
#10 0x00000004 in ?? ()
#11 0x088f7ff4 in ?? ()
#12 0x09ef9334 in ?? ()
#13 0x00000100 in ?? ()
#14 0x00000100 in ?? ()
#15 0x081d542d in prs_grow (ps=0x9eebb38, extra_space=<value optimized out>)
    at rpc_parse/parse_prs.c:299
#16 0xb7e94841 in _talloc_free () from /usr/lib/libtalloc.so.2
#17 0x082f18e8 in api_spoolss_EnumPrinterData (p=0x9ef9288)
    at ../librpc/gen_ndr/srv_spoolss.c:5735
#18 0x08334829 in api_rpcTNP (p=<value optimized out>, 
    api_rpc_cmds=<value optimized out>, n_cmds=110)
    at rpc_server/srv_pipe.c:2435
#19 0x083350a2 in api_pipe_request (p=0x9ef9288) at rpc_server/srv_pipe.c:2374
#20 0x0832df42 in process_complete_pdu (p=0x9ef9288)
    at rpc_server/srv_pipe_hnd.c:483
#21 0x0832e5d7 in np_write_send (mem_ctx=0x9eeb5e8, ev=0x9ecf268, 
    handle=0x9efdde0, data=0x9eeb628 "\005", len=56)
    at rpc_server/srv_pipe_hnd.c:751
#22 0x08100108 in api_fd_reply (conn=<value optimized out>, 
    vuid=<value optimized out>, req=0x9eeb4f8, setup=0x9ef1fe0, 
    data=0x9f18328 "\005", params=0x0, suwcnt=2, tdscnt=56, tpscnt=0, 
    mdrcnt=1024, mprcnt=0) at smbd/ipc.c:254
#23 0x0810070b in handle_trans (conn=<value optimized out>, 
    req=<value optimized out>, state=0x9efce78) at smbd/ipc.c:519
#24 0x081011c9 in reply_trans (req=0x9eeb4f8) at smbd/ipc.c:761
#25 0x08169d06 in switch_message (type=<value optimized out>, req=0x9eeb4f8, 
    size=144) at smbd/process.c:1400
#26 0x0816a0e2 in process_smb (conn=<value optimized out>, 
    inbuf=<value optimized out>, nread=144, unread_bytes=0, seqnum=0, 
    encrypted=<value optimized out>, deferred_pcd=0x0) at smbd/process.c:1432
#27 0x0816a69c in smbd_server_connection_handler (ev=0x9ecf268, fde=0x9ee8af0, 
    flags=<value optimized out>, private_data=0x9ecf2d8) at smbd/process.c:2113
#28 0x083c521e in run_events (ev=0x9ecf268, selrtn=1, read_fds=0xbfa5c438, 
    write_fds=0xbfa5c3b8) at lib/events.c:131
#29 0x08169167 in smbd_process () at smbd/process.c:840
#30 0x08708aac in smbd_accept_connection (ev=0x9ecf268, fde=0x9f17f28, 
    flags=1, private_data=0x9f18b98) at smbd/server.c:404
#31 0x083c521e in run_events (ev=0x9ecf268, selrtn=1, read_fds=0xbfa5c83c, 
    write_fds=0xbfa5c7bc) at lib/events.c:131
#32 0x083c54df in s3_event_loop_once (ev=0x9ecf268, 
    location=0x88e1e6a "smbd/server.c:692") at lib/events.c:194
#33 0x083c5b28 in _tevent_loop_once (ev=0x9ecf268, 
    location=0x88e1e6a "smbd/server.c:692") at ../lib/tevent/tevent.c:490
#34 0x08709a9a in main (argc=2, argv=0xbfa5cc54) at smbd/server.c:692