Bug#202756: nfs-kernel-server: 1.0.5-1 works with libc6 from unstable but fails with libc6 2.3.2-1 from experimental
Juergen Kreileder <jk@blackdown.de> writes:
[...]
> I've posted a some gdb info about the mountd crash some time ago
> (see
> http://lists.debian.org/debian-glibc/2003/debian-glibc-200308/msg00270.html).
> I still see exactly the same problem with the newer versions of
> glibc and nfs-utils: The crash happens at svc.c:413 (xprt =
> xports[fd];) because __rpc_thread_variables is returning a NULL
> svc_xports_s.
Here's another backtrace from a run with an unstripped mountd and
doing "mount -a -t nfs" on a client which already had two (out of
four) directories mounted. Only one more directory got mounted, then
mountd crashed:
Program received signal SIGSEGV, Segmentation fault.
0x4012a258 in svc_getreq_common (fd=3) at svc.c:413
413 svc.c: No such file or directory.
in svc.c
(gdb) bt f
#0 0x4012a258 in svc_getreq_common (fd=3) at svc.c:413
stat = 3
msg = {rm_xid = 1312769015, rm_direction = CALL, ru = {RM_cmb = {cb_rpcvers = 2, cb_prog = 100005, cb_vers = 3, cb_proc = 1, cb_cred = {oa_flavor = 1, oa_base = 0xbffff420 "?Z\f\027",
oa_length = 28}, cb_verf = {oa_flavor = 0, oa_base = 0xbffff5b0 "\217õÿ¿\225õÿ¿\237õÿ¿£õÿ¿", oa_length = 0}}, RM_rmb = {rp_stat = 2, ru = {RP_ar = {ar_verf = {oa_flavor = 100005,
oa_base = 0x3 <Address 0x3 out of bounds>, oa_length = 1}, ar_stat = PROG_UNAVAIL, ru = {AR_versions = {low = 3221222432, high = 28}, AR_results = {where = 0xbffff420 "?Z\f\027", proc = 0x1c}}},
RP_dr = {rj_stat = 100005, ru = {RJ_versions = {low = 3, high = 1}, RJ_why = AUTH_BADVERF}}}}}}
xprt = (SVCXPRT *) 0x4
cred_area = "?Z\f\027\000\000\000\004dual", '\0' <repeats 11 times>, "\001\000\000\000\000æ¢\004@æ¢\004@\bõÿ¿\020ôÿ¿¤¨\000@\000\000\000\000\234\207\002@xôÿ¿k\224\000@\001", '\0' <repeats 11 times>, "È<\001@\234\207\002@\234\207\002@xõÿ¿È¨\000@@÷ÿ¿Ê\006\000\000xõÿ¿\212¨\000@È<\001@0\224\000@<÷ÿ¿8÷ÿ¿\214\b\000\000\000\000\000\000\210<\001@\234\207\002@\234\207\002@xõÿ¿\200ôÿ¿\216Õ\000@\000\000\000\000@\037\"Aèôÿ¿\210<\001@\020õÿ¿\000\000\000\000øôÿ¿~Ö\000@\b\000\000\000,\000\000\000èõ"...
#1 0x4012a14c in svc_getreqset (readfds=0xbffff990) at svc.c:374
mask = 8
maskp = (u_int32_t *) 0xbffff994
setsize = 1024
sock = 0
#2 0x0804cd0f in my_svc_run () at svc_run.c:86
readfds = {fds_bits = {8, 0 <repeats 31 times>}}
selret = 1
#3 0x0804b1bb in main (argc=-1073743248, argv=0x5) at mountd.c:583
fd = 5
export_file = 0x805404e "/etc/exports"
foreground = 0
port = 0
descriptors = 0
c = <value optimized out>
sa = {__sigaction_handler = {sa_handler = 0x804a180 <killer>, sa_sigaction = 0x804a180 <killer>}, sa_mask = {__val = {0 <repeats 32 times>}}, sa_flags = 0, sa_restorer = 0xbffffb08}
rlim = {rlim_cur = 3221224080, rlim_max = 1074003008}
Juergen
--
Juergen Kreileder, Blackdown Java-Linux Team
http://www.blackdown.org/java-linux/java2-status/
Reply to: