[Pkg-samba-maint] Bug#732342: Bug#732342: Stack Trace

[Andrew Bartlett]

On Wed, 2014-01-08 at 14:29 +1300, Andrew Bartlett wrote:
> On Tue, 2014-01-07 at 16:58 -0800, Steve Langasek wrote:
> > On Wed, Jan 08, 2014 at 01:54:32PM +1300, Andrew Bartlett wrote:
> > 
> > > > > Reading symbols from /usr/lib/x86_64-linux-gnu/libhdb.so.9...Reading
> > > > > symbols from
> > > > > /usr/lib/debug/usr/lib/x86_64-linux-gnu/libhdb.so.9.2.0...done.
> > > > > done.
> > > > > Loaded symbols for /usr/lib/x86_64-linux-gnu/libhdb.so.9
> > 
> > > > > That happened with the samba server in PDC mode, running "passwd"
> > > > > via sssd or changing the password via Windows 8.
> > 
> > > > I'm sorry to say that this stack trace shows signs of stack corruption.
> > > > "0x0000000000000000" and "0x0000000000000008" are not valid addresses to
> > > > appear in a backtrace.
> > 
> > > > You may have better luck debugging by running under valgrind, which can
> > > > often detect stack corruption errors at runtime /before/ they clobber the
> > > > stack.
> > 
> > > I strongly suspect in this and in 734355 that Heimdal and Samba have got
> > > out of sync.  We use libhdb (and other parts) from Heimdal in a quite
> > > intimate manner.
> > 
> > By "intimate", do you mean "using private interfaces"?
> 
> Samba is developed and tested with the in-tree version of Heimdal.  The
> way it's packaged in debian isn't how we develop or test it, but allows
> us to comply with policies regarding bundled libraries. 
> 
> > What are the relevant values of "in-sync-ness" for heimdal?
> 
> I would prefer it was exactly the version we have in-tree, but that's
> now quite old.

To be clear, hdb.h is public on debian.  We need to confirm we are
building against that, and not the in-tree one, but beyond that, we need
to check what changes have been made on the Heimdal side to understand
the ABI rules here, and if we need to pin things down more. 

hdb is used in an essential and core part of Samba's AD DC (the KDC).

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20140108/1bbc0b1c/attachment.sig>