#5633 krb5kdc segfault at 60 ip 00007fcd3779951b sp 00007ffca306dc00 error 4 in libldap_r-2.4.so.2.10.2
Closed: insufficientinfo Opened by pvoborni.

Description of problem:

(gdb) bt
#0  0x00007ff77fc715d7 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007ff77fc72cc8 in __GI_abort () at abort.c:90
#2  0x00007ff77fc6a546 in __assert_fail_base (fmt=0x7ff77fdba128 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", 
    assertion=assertion@entry=0x7ff77887de80 "( (ld)->ldc->ldc_options.ldo_valid == 0x2 )", file=file@entry=0x7ff77887f785 "getvalues.c", 
    line=line@entry=98, function=function@entry=0x7ff77887f7e0 <__PRETTY_FUNCTION__.9013> "ldap_get_values_len") at assert.c:92
#3  0x00007ff77fc6a5f2 in __GI___assert_fail (assertion=assertion@entry=0x7ff77887de80 "( (ld)->ldc->ldc_options.ldo_valid == 0x2 )", 
    file=file@entry=0x7ff77887f785 "getvalues.c", line=line@entry=98, 
    function=function@entry=0x7ff77887f7e0 <__PRETTY_FUNCTION__.9013> "ldap_get_values_len") at assert.c:101
#4  0x00007ff77885f703 in ldap_get_values_len (ld=ld@entry=0x7ff783e62d90, entry=entry@entry=0x7ff783eb55e0, 
    target=target@entry=0x7ff778cb2c4e "krbTicketFlags") at getvalues.c:98
#5  0x00007ff778ca776e in ipadb_ldap_attr_to_int (lcontext=lcontext@entry=0x7ff783e62d90, le=le@entry=0x7ff783eb55e0, 
    attrname=attrname@entry=0x7ff778cb2c4e "krbTicketFlags", result=result@entry=0x7ffd08acecd4) at ipa_kdb_common.c:354
#6  0x00007ff778ca9f41 in ipadb_parse_ldap_entry (kcontext=kcontext@entry=0x7ff783e7eeb0, 
    principal=0x7ff783e7a2d0 "krbtgt/SOME.FOO@SOME.FOO", lentry=0x7ff783eb55e0, kentry=kentry@entry=0x7ffd08acee68, 
    polmask=polmask@entry=0x7ffd08acedac) at ipa_kdb_principals.c:398
#7  0x00007ff778caaa4b in ipadb_get_principal (kcontext=0x7ff783e7eeb0, search_for=<optimized out>, flags=8192, entry=0x7ffd08acee68)
    at ipa_kdb_principals.c:969
#8  0x00007ff7817e2ad4 in krb5_db_get_principal (kcontext=kcontext@entry=0x7ff783e7eeb0, search_for=0x7ff783e754d0, flags=8192, 
    entry=entry@entry=0x7ffd08acee68) at kdb5.c:764
#9  0x00007ff781e48492 in kdc_get_server_key (context=0x7ff783e7eeb0, ticket=0x7ff783e7a370, flags=flags@entry=8192, 
    match_enctype=<optimized out>, server_ptr=server_ptr@entry=0x7ffd08acef50, key=key@entry=0x0, kvno=kvno@entry=0x0) at kdc_util.c:449
#10 0x00007ff781e4883c in kdc_rd_ap_req (kdc_active_realm=0x7ff783e9b8f0, kdc_active_realm=0x7ff783e9b8f0, ticket=0x7ffd08acf0b8, 
    tgskey=0x7ffd08acf0a0, server=0x7ffd08acef50, auth_context=0x7ff783e758c0, apreq=<optimized out>) at kdc_util.c:392
#11 kdc_process_tgs_req (kdc_active_realm=kdc_active_realm@entry=0x7ff783e9b8f0, request=0x7ff783e793a0, from=from@entry=0x7ff783eb90b0, 
    pkt=pkt@entry=0x7ff783eb91d0, ticket=ticket@entry=0x7ffd08acf0b8, krbtgt_ptr=krbtgt_ptr@entry=0x7ffd08acf0e0, 
    tgskey=tgskey@entry=0x7ffd08acf0a0, subkey=subkey@entry=0x7ffd08acf098, pa_tgs_req=pa_tgs_req@entry=0x7ffd08acf0f8) at kdc_util.c:262
#12 0x00007ff781e43bfc in process_tgs_req (handle=handle@entry=0x7ff78205d2a0 <shandle>, pkt=pkt@entry=0x7ff783eb91d0, 
    from=from@entry=0x7ff783eb90b0, response=response@entry=0x7ffd08acf398) at do_tgs_req.c:182
#13 0x00007ff781e42003 in dispatch (cb=0x7ff78205d2a0 <shandle>, local_saddr=local_saddr@entry=0x7ff783eb9148, from=from@entry=0x7ff783eb90b0, 
    pkt=pkt@entry=0x7ff783eb91d0, is_tcp=is_tcp@entry=0, vctx=vctx@entry=0x7ff783e7dfa0, 
    respond=respond@entry=0x7ff781e54e50 <process_packet_response>, arg=arg@entry=0x7ff783eb9080) at dispatch.c:180
#14 0x00007ff781e56055 in process_packet (ctx=0x7ff783e7dfa0, ev=<optimized out>) at net-server.c:1576
#15 0x00007ff77ffffcd8 in verto_fire (ev=0x7ff783e9c320) at verto.c:947
#16 0x00007ff777fde30b in epoll_event_loop (tvalp=0x7ffd08acf550, epoll_ev=0x7ff783e7df70) at ../tevent_epoll.c:728
#17 epoll_event_loop_once (ev=<optimized out>, location=<optimized out>) at ../tevent_epoll.c:926
#18 0x00007ff777fdc7d7 in std_event_loop_once (ev=0x7ff783e7dd30, location=0x7ff774c5e132 "verto-tevent.c:55") at ../tevent_standard.c:114
---Type <return> to continue, or q <return> to quit---
#19 0x00007ff777fd8fbd in _tevent_loop_once (ev=0x7ff783e7dd30, location=0x7ff774c5e132 "verto-tevent.c:55") at ../tevent.c:530
#20 0x00007ff77ffff4af in verto_run (ctx=ctx@entry=0x7ff783e7dfa0) at verto.c:578
#21 0x00007ff781e415f7 in main (argc=5, argv=0x7ffd08acf7c8) at main.c:1066

Version-Release number of selected component (if applicable):
krb5-server-1.12.2-14.el7.x86_64

Actual results:
krb5 segaults

Expected results:
krb5 should not crash


Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1267720 (Red Hat Enterprise Linux 7)

Metadata Update from @pvoborni:
- Issue assigned to simo
- Issue set to the milestone: FreeIPA 4.5 backlog

The bug was not reproduced for almost 20 months, closing. Please reopen if the situation changes.

Metadata Update from @pvoborni:
- Issue close_status updated to: insufficientinfo
- Issue status updated to: Closed (was: Open)

Metadata