Samba 3.6.4 segfaults on guest authentication

[Christian Manal <moenoel@xxxxxxxxxxxxxxxxxxxxxxxx>]

Hi,

I recently updated to Samba 3.6.4 from 3.6.0 (on Solaris 10 x86). Since
then, passwordless guest authentication makes smbd crash with a segfault.

I run the following command to test if the Samba server is available via
Nagios:

   smbclient -U guest -N -L smb-serv

Since the update, it returns with:

  session setup failed: NT_STATUS_PIPE_BROKEN


Server side level 10 log and a stacktrace of the resulting coredump are
attached. Any help with this would be appreciated.


Regards,
Christian Manal

core 'core' of 15868:   /services/samba/sbin/smbd -D
 fe90bb17 _lwp_kill (1, 6) + 7
 fe8b365f raise    (6) + 1f
 fe892961 abort    (6, 0, 8a7afc7, 8a7afeb, 8b41f1c, 8a7a122) + cd
 084f7168 ???????? (8a7dbf6, 3dfc, 0, 8a7adb8, 0, 8046014)
 085094b4 log_stack_trace (8a7adb8, 0, 8a7ada9, 8a7b005, fe97e000, fe3d2a00)
 084f6a3a sig_fault (b, 0, 80460a0, fe8f5ac3, 8046058, fe8f5ac3)
 084f6a4b sig_fault (b, 0, 80460f8) + 11
 fe908e9f __sighndlr (b, 0, 80460f8, 84f6a3a) + f
 fe8feb7f call_user_handler (b, 0, 80460f8) + 22b
 fe8fecc0 sigacthandler (b, 0, 80460f8) + 7c
 --- called from signal handler with signal 11 (SIGSEGV) ---
 fe8863dc strlen   (891dc3b, 80471b4, 80470b0, 0) + c
 fe8e4953 vsnprintf (80470f0, 80, 891dc08, 80471b4) + 73
 fe8e0d60 vasprintf (8047190, 891dc08, 80471b4, 2, 0, 80471b4) + 34
 084f62b1 dbgtext  (891dc08, 8b68f60, 0, 891e0cf, 891dba3, 100) + 3e
 080f60b4 register_existing_vuid (8b64de0, 64, 0, 8b69a58, 0, 80473a4) + 1fd
 081330f9 reply_sesssetup_and_X (8bad0e8, 1, 8bad058, 5c, 27, 0) + 15b5
 081792f6 switch_message (73, 8bad0e8, 5c, 0, 0, 0) + 686
 0817947f construct_reply (8b64de0, 0, 5c, 0, 0, 0) + 17b
 081797b2 process_smb (8b64de0, 8bad058, 5c, 0, 0, 0) + 1ed
 0817aaac smbd_server_connection_read_handler (8b64de0, 19, 3b, f300d, 8b64e2c, 8b64e2c) + 218
 0817ab1f smbd_server_connection_handler (8b64d68, 8b92e48, 1, 8b64de0, 0, 8bab4c8) + 68
 0851c991 run_events_poll (8b64d68, 1, 8ba4d28, 2, 8047810, fea2c230) + 630
 08178835 smbd_server_connection_loop_once (8047874, 8b64de0, 19, 1, 817aab7, 8b64de0) + 115
 0817d273 smbd_process (8b64de0, ffffffff, 9cf1f71a, 584cec60, 33, 9cf1f71a) + c72
 0890dd7f smbd_accept_connection (8b64d68, 8ba7c38, 1, 8ba7660, 0, 8047e14) + 416
 0851c991 run_events_poll (8b64d68, 1, 8b6c098, 5, 8047bf4, 84dc1ac) + 630
 0851cc1f s3_event_loop_once (8b64d68, 8b30e50, 8b647c0, 85222b1, 8ba4960, 8b41f1c) + 14e
 0851dbcc _tevent_loop_once (8b64d68, 8b30e50, 8b30e25, 8b3149d, 0, 8b31485) + dd
 0890eaa1 smbd_parent_loop (8bad990, 8b31485, 0, 8b31401, ffffffff, 2e0b57be) + 85
 0890fc1f main     (80d9c60, 2, 8047e98) + 1106
 080d9c60 _start   (2, 8047f24, 8047f3e, 0, 8047f41, 8047f59) + 80

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba