Segfaults in MIT libkrb5
Fredrik Tolf
fredrik at dolda2000.com
Thu Dec 14 14:25:50 EST 2006
Hi list!
I'm experiencing weird segfaults in a program I've written. While I
cannot exactly prove that it isn't my own fault and I'm not just doing a
great fandango all over libkrb5's core, they all occur in the Kerberos
library, in incidents seemingly related to the error tables. The usual
backtrace looks like this:
#0 0xb7d52a43 in error_message (code=-1429577725) at error_message.c:58
#1 0xb7f0e598 in krb5int_locate_server () from /usr/lib/libkrb5.so.3
#2 0xb7f0e843 in krb5_locate_kdc () from /usr/lib/libkrb5.so.3
#3 0xb7f1072f in krb5_sendto_kdc () from /usr/lib/libkrb5.so.3
#4 0xb7eff3e0 in krb5_send_tgs () from /usr/lib/libkrb5.so.3
#5 0xb7ef0b6d in krb5_get_cred_via_tkt () from /usr/lib/libkrb5.so.3
#6 0xb7eeff0e in krb5_fwd_tgt_creds () from /usr/lib/libkrb5.so.3
#7 0xb7ef183d in krb5_get_credentials_renew ()
from /usr/lib/libkrb5.so.3
#8 0x08061df1 in renewcreds (cancelled=0, data=0x835bd18) at
auth-krb5.c:228
#9 0x0804c9a0 in main (argc=1, argv=0xbfac4104) at main.c:550
Today, however, I got another segfault, but which also seems related to
the error tables:
#0 0xb7a2ff63 in krb_realmofhost () from /usr/lib/libkrb4.so.2
#1 0xb7a2ffd0 in initialize_krb_error_table ()
from /usr/lib/libkrb4.so.2
#2 0xb7ba21c1 in _pam_krb5_init_ctx (ctx=0x8443e88, argc=2,
argv=0x8422530) at init.c:80
...
Could the fault somehow be related to the fact that this particular
program both uses the Kerberos library directly (for Kerberized clients)
and the pam_krb5 PAM module (which is line #2 in the second backtrace
above), which is called from a userspace thread (using the ucontext
calls)? Is there some other known problem? I also call the seemingly
undocumented function krb5_get_credentials_renew, if that might matter.
I'm using MIT Kerberos V 1.4.3 and a system-supplied com_err library,
version 1.39. The system is Gentoo Linux.
For reference, the program in question is the daemon in Dolda Connect,
at <http://www.dolda2000.com/~fredrik/doldaconnect/>
I would be very glad for any assistance!
Fredrik Tolf
More information about the Kerberos
mailing list