#356 Double-free error shutting down sssd_nss
Closed: Fixed None Opened 14 years ago by sgallagh.

This appears to only happen when the process receives a SIGTERM.

#0  0x000000341e6326b5 in raise (sig=<value optimized out>)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
        resultvar = 0
        pid = <value optimized out>
        selftid = <value optimized out>
#1  0x000000341e633e95 in abort () at abort.c:92
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x14, sa_sigaction = 0x14}, 
          sa_mask = {__val = {140736311994416, 46068279200, 223843750069, 
              16003508128, 140736311994416, 223847934728, 140118258700288, 
              140118251776376, 4294967295, 19983840, 1, 223866817832, 0, 
              19555392, 0, 0}}, sa_flags = 505469824, sa_restorer = 0x1}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x000000341f601d8c in talloc_abort (
    reason=0x341f607980 "Bad talloc magic value - double free") at talloc.c:199
No locals.
#3  0x000000341f601c69 in talloc_abort_double_free () at talloc.c:218
No locals.
#4  talloc_chunk_from_ptr () at talloc.c:239
        pp = 0x12a6440 ""
        tc = 0x12a63f0
#5  _talloc_free () at talloc.c:1118
        tc = <value optimized out>
#6  0x000000000043f102 in sss_dp_req_destructor (ptr=0x1254970)
    at ../../server/responder/common/responder_dp.c:76
        sdp_req = 0x1254970
        cb = 0x1378030
        next = 0x12bab70
        key = {type = HASH_KEY_STRING, {str = 0x1378030 "", ul = 20414512}}
        hret = 52
        __FUNCTION__ = "sss_dp_req_destructor"
#7  0x000000341f602d3e in _talloc_free_internal (ptr=0x1254970, 
    location=0x341f6078e7 "talloc.c:1861") at talloc.c:600
        d = <value optimized out>
        tc = 0x1254920
#8  0x000000341f602bcb in _talloc_free_internal (ptr=0x122b860, 
    location=0x341f6078e7 "talloc.c:1861") at talloc.c:631
        child = 0x1254970
        new_parent = 0x0
        tc = 0x122b810
#9  0x000000341f602bcb in _talloc_free_internal (ptr=0x122b320, 
    location=0x341f6078e7 "talloc.c:1861") at talloc.c:631
        child = 0x122b860
        new_parent = 0x0
        tc = 0x122b2d0
#10 0x000000341f602bcb in _talloc_free_internal (ptr=0x1228440, 
    location=0x341f6078e7 "talloc.c:1861") at talloc.c:631
        child = 0x122b320
        new_parent = 0x0
        tc = 0x12283f0
#11 0x000000341f602bcb in _talloc_free_internal (ptr=0x1228310, 
    location=0x341f6078e7 "talloc.c:1861") at talloc.c:631
        child = 0x1228440
        new_parent = 0x0
        tc = 0x12282c0
#12 0x000000341f601a6b in _talloc_free_internal (
    location=<value optimized out>, ptr=<value optimized out>) at talloc.c:631
        child = 0x1228310
        new_parent = 0x0
        tc = 0x12280e0
#13 _talloc_free (location=<value optimized out>, ptr=<value optimized out>)
    at talloc.c:1133
        tc = <value optimized out>
#14 0x000000341e635b72 in __run_exit_handlers (status=<value optimized out>, 
    listp=<value optimized out>, run_list_atexit=<value optimized out>)
    at exit.c:78
        atfct = <value optimized out>
        onfct = <value optimized out>
        cxafct = <value optimized out>
#15 exit (status=<value optimized out>, listp=<value optimized out>, 
    run_list_atexit=<value optimized out>) at exit.c:100
No locals.
#16 0x000000000043927e in sig_term (sig=15) at ../../server/util/server.c:191
        done_sigterm = 0
        __FUNCTION__ = "sig_term"
#17 <signal handler called>
No symbol table info available.
#18 0x000000341e6de513 in __epoll_wait_nocancel ()
    at ../sysdeps/unix/syscall-template.S:82
No locals.
#19 0x00000034216054d6 in epoll_event_loop (tvalp=<value optimized out>, 
    std_ev=0x12283d0) at tevent_standard.c:264
        ret = <value optimized out>
        i = <value optimized out>
        events = {{events = 17, data = {ptr = 0x122aa20, fd = 19048992, 
              u32 = 19048992, u64 = 19048992}}}
        timeout = <value optimized out>
#20 std_event_loop_once (tvalp=<value optimized out>, std_ev=0x12283d0)
    at tevent_standard.c:544
        tval = {tv_sec = 40, tv_usec = 708010}
#21 0x0000003421602780 in _tevent_loop_once (ev=0x1228310, 
    location=0x44ed78 "../../server/util/server.c:428") at tevent.c:490
        ret = <value optimized out>
        nesting_stack_ptr = 0x0
#22 0x00000034216027fb in tevent_common_loop_wait (ev=0x1228310, 
    location=0x44ed78 "../../server/util/server.c:428") at tevent.c:591
        ret = <value optimized out>
#23 0x000000000043a118 in server_loop (main_ctx=0x1228440)
    at ../../server/util/server.c:428
No locals.
#24 0x000000000040696d in main (argc=5, argv=0x7fffb9e232a8)
    at ../../server/responder/nss/nsssrv.c:363
        opt = -1
        pc = 0x1227030
        main_ctx = 0x1228440
        ret = 0
        long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, 
            arg = 0x656240, val = 0, descrip = 0x44432e "Help options:", 
            argDescrip = 0x0}, {longName = 0x44433c "debug-level", 
            shortName = 100 'd', argInfo = 2, arg = 0x656338, val = 0, 
            descrip = 0x444348 "Debug level", argDescrip = 0x0}, {
            longName = 0x444354 "debug-to-files", shortName = 102 'f', 
            argInfo = 0, arg = 0x656340, val = 0, 
            descrip = 0x444368 "Send the debug output to files instead of stderr", argDescrip = 0x0}, {longName = 0x444399 "debug-timestamps", 
            shortName = 0 '\000', argInfo = 0, arg = 0x65633c, val = 0, 
            descrip = 0x4443aa "Add debug timestamps", argDescrip = 0x0}, {
            longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0, 
            val = 0, descrip = 0x0, argDescrip = 0x0}}
        __FUNCTION__ = "main"

Fields changed

owner: sgallagh => simo

Fixed by c73af2e

fixedin: => 1.1.0
resolution: => fixed
status: new => closed

Fields changed

fixedin: 1.1.0 => 1.0.2

Fields changed

rhbz: => 0

Metadata Update from @sgallagh:
- Issue assigned to simo
- Issue set to the milestone: SSSD 1.1

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1398

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata