[Pkg-samba-maint] Bug#760781: samba-common-bin: 'net time' segfaults in cli_connect_nb_send()

[Petter Reinholdtsen]

Package: samba-common-bin
Version: 2:4.1.11+dfsg-1
User: debian-edu at lists.debian.org
Usertags: debian-edu

When running 'net time' in a fresh Debian Edu installation, it
segfaults.  This is the output after installing samba-dbg and running it
in valgrind:

root at skolelinuxtest:~# valgrind net time
==23601== Memcheck, a memory error detector
==23601== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==23601== Using Valgrind-3.9.0 and LibVEX; rerun with -h for copyright info
==23601== Command: net time
==23601== 
==23601== Invalid read of size 1
==23601==    at 0x482B7FB: index (mc_replace_strmem.c:223)
==23601==    by 0x4AB02C9: cli_connect_nb_send (in /usr/lib/i386-linux-gnu/samba/liblibsmb.so.0)
==23601==    by 0x4AB3524: cli_connect_nb (in /usr/lib/i386-linux-gnu/samba/liblibsmb.so.0)
==23601==    by 0x15121F: cli_servertime (in /usr/bin/net)
==23601==    by 0x151716: net_time (in /usr/bin/net)
==23601==    by 0x170F3A: net_run_function (in /usr/bin/net)
==23601==    by 0x11F23D: main (in /usr/bin/net)
==23601==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==23601== 
==23601== 
==23601== Process terminating with default action of signal 11 (SIGSEGV)
==23601==  Access not within mapped region at address 0x0
==23601==    at 0x482B7FB: index (mc_replace_strmem.c:223)
==23601==    by 0x4AB02C9: cli_connect_nb_send (in /usr/lib/i386-linux-gnu/samba/liblibsmb.so.0)
==23601==    by 0x4AB3524: cli_connect_nb (in /usr/lib/i386-linux-gnu/samba/liblibsmb.so.0)
==23601==    by 0x15121F: cli_servertime (in /usr/bin/net)
==23601==    by 0x151716: net_time (in /usr/bin/net)
==23601==    by 0x170F3A: net_run_function (in /usr/bin/net)
==23601==    by 0x11F23D: main (in /usr/bin/net)
==23601==  If you believe this happened as a result of a stack
==23601==  overflow in your program's main thread (unlikely but
==23601==  possible), you can try to increase the size of the
==23601==  main thread stack using the --main-stacksize= flag.
==23601==  The main thread stack size used in this run was 8388608.
==23601== 
==23601== HEAP SUMMARY:
==23601==     in use at exit: 88,135 bytes in 800 blocks
==23601==   total heap usage: 1,569 allocs, 769 frees, 132,487 bytes allocated
==23601== 
==23601== LEAK SUMMARY:
==23601==    definitely lost: 50 bytes in 2 blocks
==23601==    indirectly lost: 0 bytes in 0 blocks
==23601==      possibly lost: 9,652 bytes in 87 blocks
==23601==    still reachable: 78,433 bytes in 711 blocks
==23601==         suppressed: 0 bytes in 0 blocks
==23601== Rerun with --leak-check=full to see details of leaked memory
==23601== 
==23601== For counts of detected and suppressed errors, rerun with: -v
==23601== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 0 from 0)
Segmentation fault
root at skolelinuxtest:~# 

-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.14-2-686-pae (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=locale: Cannot set LC_ALL to default locale: No such file or directory
UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages samba-common-bin depends on:
ii  libbsd0             0.7.0-2
ii  libc6               2.19-10
ii  libcomerr2          1.42.11-2
ii  libgssapi3-heimdal  1.6~rc2+dfsg-8
ii  libkrb5-26-heimdal  1.6~rc2+dfsg-8
ii  libldap-2.4-2       2.4.39-1.1+b1
ii  libncurses5         5.9+20140712-2
ii  libpopt0            1.16-10
ii  libreadline6        6.3-8
ii  libtalloc2          2.1.1-2
ii  libtdb1             1.3.0-1.1
ii  libtevent0          0.9.21-1
ii  libtinfo5           5.9+20140712-2
ii  libwbclient0        2:4.1.11+dfsg-1
ii  python              2.7.8-1
ii  python-samba        2:4.1.11+dfsg-1
pn  python2.7:any       <none>
ii  samba-common        2:4.1.11+dfsg-1
ii  samba-libs          2:4.1.11+dfsg-1

samba-common-bin recommends no packages.

Versions of packages samba-common-bin suggests:
pn  heimdal-clients  <none>

-- 
Vennlig hilsen
Petter Reinholdtsen