Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 4 Aug 1999 11:23:18 +0200 (CEST)
From:      Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
To:        FreeBSD-gnats-submit@freebsd.org
Subject:   bin/12957: rpc.rusersd dumps core with signal 11 when receiving rusers command from HP-UX
Message-ID:  <199908040923.LAA27025@internal>

next in thread | raw e-mail | index | archive | help

>Number:         12957
>Category:       bin
>Synopsis:       rpc.rusersd dumps core with signal 11 when receiving rusers command from HP-UX
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Aug  4 02:30:01 PDT 1999
>Closed-Date:
>Last-Modified:
>Originator:     Andre Albsmeier
>Release:        FreeBSD 3.2-STABLE i386
>Organization:
>Environment:

3.2-STABLE with rpc.rusersd enabled

HP-UX 10.20 on the same wire.

>Description:

On the HP machine we run the "rusers" command. We see some output of
users being logged in at remote machines. After about 1 minute, rpc.rusersd
on the FreeBSD machine crashes with signal 11. This has been observed
on multiple FreeBSD machines. When "rusers" is being run on a FreeBSD
machine, everything works.

I don't know if the HP-UX rusers command does something wrong; however,
the daemon should not crash under FreeBSD.


>How-To-Repeat:

Set up a 3.2-STABLE machine with rpc.rusersd enabled. Issue a "rusers" command
on a HP-UX 10.20 machine which is attached to the same wire. Meanwhile, do a
"tail -f /var/log/messages" on the FreeBSD machine and wait.

>Fix:
	
Unknown. I can easily reproduce the problem, so if someone got fixes/patches
I will try them out happily. 

Here is the gdb session I ran on the corefile:

root@schlappy:/>gdb /usr/libexec/rpc.rusersd rpc.rusersd.core         
GNU gdb 4.18
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...
Core was generated by `rpc.rusersd'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/librpcsvc.so.2...done.
Reading symbols from /usr/lib/libutil.so.2...done.
Reading symbols from /usr/lib/libc.so.3...done.
Reading symbols from /usr/libexec/ld-elf.so.1...done.
#0  0x280cd97a in xdr_string () from /usr/lib/libc.so.3
(gdb) where
#0  0x280cd97a in xdr_string () from /usr/lib/libc.so.3
#1  0x28067540 in xdr_utmp () from /usr/lib/librpcsvc.so.2
#2  0x2806758f in xdr_utmpidle () from /usr/lib/librpcsvc.so.2
#3  0x280b8036 in xdr_array () from /usr/lib/libc.so.3
#4  0x2806763c in xdr_utmpidlearr () from /usr/lib/librpcsvc.so.2
#5  0x280c93ba in xdr_accepted_reply () from /usr/lib/libc.so.3
#6  0x280cd91c in xdr_union () from /usr/lib/libc.so.3
#7  0x280c94d4 in xdr_replymsg () from /usr/lib/libc.so.3
#8  0x280ab636 in svcudp_create () from /usr/lib/libc.so.3
#9  0x280abf27 in svc_sendreply () from /usr/lib/libc.so.3
#10 0x80491bc in rusers_service (rqstp=0xbfbfdc98, transp=0x804e000)
    at /src/src-3/libexec/rpc.rusersd/rusers_proc.c:388
#11 0x280ac3aa in svc_getreqset2 () from /usr/lib/libc.so.3
#12 0x28089690 in svc_run () from /usr/lib/libc.so.3
#13 0x8048c45 in main (argc=1, argv=0xbfbfdd54)
    at /src/src-3/libexec/rpc.rusersd/rusersd.c:109
#14 0x8048a3d in _start ()


>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199908040923.LAA27025>