#3821 crash related to sbus_router_destructor()
Closed: Fixed 5 years ago Opened 5 years ago by pbrezina.

Ticket was cloned from Red Hat Bugzilla: Bug 1623878

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Reading symbols from /usr/libexec/sssd/sssd_pam...Reading symbols from
/usr/lib/debug/usr/libexec/sssd/sssd_pam.debug...done.
done.
[New LWP 16375]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/libexec/sssd/sssd_pam --uid 0 --gid 0
--logger=files'.
Program terminated with signal 6, Aborted.
#0  0x00007f6044fc6207 in __GI_raise (sig=sig@entry=6)
   at ../nptl/sysdeps/unix/sysv/linux/raise.c:55
55        return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig);

Thread 1 (Thread 0x7f6049fd3880 (LWP 16375)):
#0  0x00007f6044fc6207 in __GI_raise (sig=sig@entry=6)
   at ../nptl/sysdeps/unix/sysv/linux/raise.c:55
       resultvar = 0
       pid = 16375
       selftid = 16375
#1  0x00007f6044fc78f8 in __GI_abort () at abort.c:90
       save_stage = 2
       act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0},
         sa_mask = {__val = {0 <repeats 15 times>, 140051460366032}},
         sa_flags = -253928400, sa_restorer = 0x7f6045357868 <stderr>}
       sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007f60458b8435 in _dbus_abort () from /lib64/libdbus-1.so.3
No symbol table info available.
#3  0x00007f60458aeeee in _dbus_warn_check_failed ()
  from /lib64/libdbus-1.so.3
No symbol table info available.
#4  0x00007f604611ad47 in sbus_router_destructor (
   router=router@entry=0x562cf0dd5c90) at src/sbus/router/sbus_router.c:258
No locals.
#5  0x00007f6045ad31ab in _tc_free_internal (tc=0x562cf0dd5c30,
   location=0x7f60461224a8 "src/sbus/connection/sbus_connection.c:70")
   at ../talloc.c:1137
       d = 0x7f604611ad30 <sbus_router_destructor>
       ptr_to_free = <optimized out>
       ptr = 0x562cf0dd5c90
#6  0x00007f604610a625 in sbus_connection_destructor (
   conn=conn@entry=0x562cf0dd5070)
   at src/sbus/connection/sbus_connection.c:70
       __FUNCTION__ = "sbus_connection_destructor"
#7  0x00007f6045ad336b in _tc_free_internal (
   location=0x7f6045adba52 "../talloc.c:435", tc=0x562cf0dd5010)
   at ../talloc.c:1137
       d = <optimized out>
       ptr_to_free = <optimized out>
       ptr = 0x562cf0dd5070
#8  _tc_free_children_internal (location=0x7f6045adba52 "../talloc.c:435",
   ptr=0x562cf0dd2d60, tc=0x562cf0dd2d00) at ../talloc.c:1646
       child = 0x562cf0dd5070
       new_parent = <optimized out>
#9  _tc_free_internal (tc=0x562cf0dd2d00,
   location=0x7f6045adba52 "../talloc.c:435") at ../talloc.c:1163
       ptr_to_free = <optimized out>
       ptr = 0x562cf0dd2d60
#10 0x00007f6045ad2aff in _tc_free_children_internal (
   location=0x7f6045adba52 "../talloc.c:435", ptr=0x562cf0dd4600,
   tc=0x562cf0dd45a0) at ../talloc.c:1646
       child = 0x562cf0dd2d60
       new_parent = 0x0
#11 _tc_free_internal (location=0x7f6045adba52 "../talloc.c:435",
   tc=0x562cf0dd45a0) at ../talloc.c:1163
       ptr_to_free = <optimized out>
       ptr = 0x562cf0dd4600
#12 _tc_free_children_internal (location=0x7f6045adba52 "../talloc.c:435",
   ptr=0x562cf0dcce40, tc=0x562cf0dccde0) at ../talloc.c:1646
       child = <optimized out>
       new_parent = <optimized out>
#13 _tc_free_internal (tc=0x562cf0dccde0,
   location=0x7f6045adba52 "../talloc.c:435") at ../talloc.c:1163
       ptr_to_free = <optimized out>
       ptr = 0x562cf0dcce40
#14 0x00007f6045ad2aff in _tc_free_children_internal (
   location=0x7f6045adba52 "../talloc.c:435", ptr=0x562cf0dcb9b0,
   tc=0x562cf0dcb950) at ../talloc.c:1646
       child = 0x562cf0dcce40
       new_parent = 0x0
#15 _tc_free_internal (location=0x7f6045adba52 "../talloc.c:435",
   tc=0x562cf0dcb950) at ../talloc.c:1163
       ptr_to_free = <optimized out>
       ptr = 0x562cf0dcb9b0
#16 _tc_free_children_internal (location=0x7f6045adba52 "../talloc.c:435",
   ptr=0x562cf0dcb700, tc=0x562cf0dcb6a0) at ../talloc.c:1646
       child = <optimized out>
       new_parent = <optimized out>
#17 _tc_free_internal (tc=0x562cf0dcb6a0,
   location=0x7f6045adba52 "../talloc.c:435") at ../talloc.c:1163
       ptr_to_free = <optimized out>
       ptr = 0x562cf0dcb700
#18 0x00007f6045ad9bfc in talloc_lib_atexit () at ../talloc.c:435
No locals.
#19 0x00007f6044fc9b69 in __run_exit_handlers (status=status@entry=0,
   listp=0x7f60453566c8 <__exit_funcs>,
   run_list_atexit=run_list_atexit@entry=true) at exit.c:77
       atfct = <optimized out>
       onfct = <optimized out>
       cxafct = <optimized out>
       f = <optimized out>
#20 0x00007f6044fc9bb7 in __GI_exit (status=status@entry=0) at exit.c:99
No locals.
#21 0x00007f604977ce71 in orderly_shutdown (status=0) at src/util/server.c:261
       sent_sigterm = 1
       debug = <optimized out>
       __FUNCTION__ = "orderly_shutdown"
#22 0x00007f6045ce89c7 in tevent_common_check_signal (ev=0x562cf0dcb9b0)
   at ../tevent_signal.c:417
       se = 0x562cf0dccb80
       exists = 0x562cf0de9c10
       count = 1
       sl = <optimized out>
       next = 0x0
       counter = {count = 1, seen = 0}
       clear_processed_siginfo = false
       i = 15
#23 0x00007f6045cea7bc in epoll_event_loop (tvalp=0x7fff6ede7280,
   epoll_ev=0x562cf0dcbc30) at ../tevent_epoll.c:647
       ret = -1
       i = <optimized out>
       timeout = <optimized out>
       wait_errno = 4
       events = {{events = 1, data = {ptr = 0x562cf0deb510, fd = -253840112,
             u32 = 4041127184, u64 = 94751019676944}}}
#24 epoll_event_loop_once (ev=<optimized out>, location=<optimized out>)
   at ../tevent_epoll.c:930
       epoll_ev = 0x562cf0dcbc30
       tval = {tv_sec = 9, tv_usec = 103183}
       panic_triggered = false
#25 0x00007f6045ce8c07 in std_event_loop_once (ev=0x562cf0dcb9b0,
   location=0x7f604979e169 "src/util/server.c:724")
   at ../tevent_standard.c:114
       glue_ptr = <optimized out>
       glue = 0x562cf0dcbae0
       ret = <optimized out>
#26 0x00007f6045ce4ffd in _tevent_loop_once (ev=ev@entry=0x562cf0dcb9b0,
   location=location@entry=0x7f604979e169 "src/util/server.c:724")
   at ../tevent.c:725
       ret = <optimized out>
       nesting_stack_ptr = 0x0
#27 0x00007f6045ce522b in tevent_common_loop_wait (ev=0x562cf0dcb9b0,
   location=0x7f604979e169 "src/util/server.c:724") at ../tevent.c:848
       ret = <optimized out>
#28 0x00007f6045ce8ba7 in std_event_loop_wait (ev=0x562cf0dcb9b0,
   location=0x7f604979e169 "src/util/server.c:724")
   at ../tevent_standard.c:145
       glue_ptr = <optimized out>
       glue = 0x562cf0dcbae0
       ret = <optimized out>
#29 0x00007f604977dd23 in server_loop (main_ctx=0x562cf0dcce40)
   at src/util/server.c:724
No locals.
#30 0x0000562cf010d7ce in main (argc=<optimized out>, argv=<optimized out>)
   at src/responder/pam/pamsrv.c:405
       opt = <optimized out>
       pc = <optimized out>
       opt_logger = 0x562cf0dc5f90 "files"
       main_ctx = 0x562cf0dcce40
       ret = <optimized out>
       uid = 0
       gid = 0
       pipe_fd = 0
       priv_pipe_fd = 3
       long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4,
           arg = 0x7f6049529320 <poptHelpOptions>, val = 0,
           descrip = 0x562cf012a162 "Help options:", argDescrip = 0x0}, {
           longName = 0x562cf012a170 "debug-level", shortName = 100 'd',
           argInfo = 2, arg = 0x7f6046994168 <debug_level>, val = 0,
           descrip = 0x562cf012a17c "Debug level", argDescrip = 0x0}, {
           longName = 0x562cf012a188 "debug-to-files", shortName = 102 'f',
           argInfo = 1073741824, arg = 0x7f6046994164 <debug_to_file>,
           val = 0,
           descrip = 0x562cf012a3e8 "Send the debug output to files instead of
stderr", argDescrip = 0x0}, {longName = 0x562cf012a197 "debug-to-stderr",
           shortName = 0 '\000', argInfo = 1073741824,
           arg = 0x7f6046994160 <debug_to_stderr>, val = 0,
           descrip = 0x562cf012a420 "Send the debug output to stderr
directly.", argDescrip = 0x0}, {longName = 0x562cf012a1a7 "debug-timestamps",
           shortName = 0 '\000', argInfo = 2,
           arg = 0x7f6046994104 <debug_timestamps>, val = 0,
           descrip = 0x562cf012a1b8 "Add debug timestamps",
           argDescrip = 0x0}, {
           longName = 0x562cf012a1cd "debug-microseconds",
           shortName = 0 '\000', argInfo = 2,
           arg = 0x7f6046994100 <debug_microseconds>, val = 0,
           descrip = 0x562cf012a450 "Show timestamps with microseconds",
           argDescrip = 0x0}, {longName = 0x562cf012a1e4 "logger",
           shortName = 0 '\000', argInfo = 1, arg = 0x7fff6ede73c0, val = 0,
           descrip = 0x562cf012a1e0 "Set logger",
           argDescrip = 0x562cf012a1eb "stderr|files|journald"}, {
           longName = 0x562cf012a201 "uid", shortName = 0 '\000',
           argInfo = 2, arg = 0x7fff6ede73ac, val = 0,
           descrip = 0x562cf012a478 "The user ID to run the server as",
           argDescrip = 0x0}, {longName = 0x562cf012a205 "gid",
           shortName = 0 '\000', argInfo = 2, arg = 0x7fff6ede73b0, val = 0,
           descrip = 0x562cf012a4a0 "The group ID to run the server as",
           argDescrip = 0x0}, {longName = 0x562cf012a209 "socket-activated",
           shortName = 0 '\000', argInfo = 0,
           arg = 0x7f60499b1a88 <socket_activated>, val = 0,
           descrip = 0x562cf012a4c8 "Informs that the responder has been
socket-activated", argDescrip = 0x0}, {longName = 0x562cf012a21a
"dbus-activated",
           shortName = 0 '\000', argInfo = 0,
           arg = 0x7f60499b1a84 <dbus_activated>, val = 0,
           descrip = 0x562cf012a500 "Informs that the responder has been
dbus-activated", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000',
           argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, argDescrip = 0x0}}
       __FUNCTION__ = "main"

Metadata Update from @pbrezina:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1623878

5 years ago

PR: https//github.com/SSSD/sssd/pull/647

Metadata Update from @jhrozek:
- Issue priority set to: blocker
- Issue set to the milestone: SSSD 2.1
- Issue tagged with: PR, bug, regression

5 years ago

Metadata Update from @jhrozek:
- Issue untagged with: PR, bug, regression
- Issue priority set to: None (was: blocker)
- Issue set to the milestone: None (was: SSSD 2.1)

5 years ago

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue set to the milestone: SSSD 2.1
- Issue status updated to: Closed (was: Open)
- Issue tagged with: PR, bug, regression

5 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4815

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata