EAP segfault in HEAD

[alanbuxey]

(8) Found Auth-Type = EAP (8) # Executing group from file /etc/raddb/sites-enabled/inner-tunnel (8) group authenticate { (8) - entering group authenticate {...} (8) eap : Expiring EAP session with state 0x6ea54beb6ead51c1 (8) eap : Finished EAP session with state 0x6ea54beb6ead51c1 (8) eap : Previous EAP request found for state 0x6ea54beb6ead51c1, released from the list (8) eap : Peer sent MSCHAPv2 (26) (8) eap : EAP MSCHAPv2 (26) (8) eap : Calling eap_mschapv2 to process EAP data (8) eap_mschapv2 : # Executing group from file /etc/raddb/sites-enabled/inner-tunnel (8) eap_mschapv2 : group MS-CHAP { (8) eap_mschapv2 : - entering group MS-CHAP {...} (8) eap_mschapv2 : ? if ("%{User-Name}" =~ /@/) (8) eap_mschapv2 : expand: '%{User-Name}' -> 'ccwl@camford.ac.uk' (8) eap_mschapv2 : ? Evaluating ("%{User-Name}" =~ /@/) -> TRUE (8) eap_mschapv2 : ? if ("%{User-Name}" =~ /@/) -> TRUE (8) eap_mschapv2 : if ("%{User-Name}" =~ /@/) { (8) eap_mschapv2 : - entering if ("%{User-Name}" =~ /@/) {...} (8) eap_mschapv2 : group { (8) eap_mschapv2 : - entering group {...} (8) NEWAD-realm : Creating challenge hash with username: ccwl@camford.ac.uk (8) NEWAD-realm : Client is using MS-CHAPv2 for ccwl@camford.ac.uk, we need NT-Password (8) NEWAD-realm : expand: '%{Stripped-User-Name}' -> 'ccwl' (8) NEWAD-realm : expand: '--username=%{%{Stripped-User-Name}:-%{User-Name:-None}}' -> '--username=ccwl' (8) NEWAD-realm : Creating challenge hash with username: ccwl@camford.ac.uk (8) NEWAD-realm : expand: '--challenge=%{NEWAD:Challenge:-00}' -> '--challenge=3fe8beda023ba80c' (8) NEWAD-realm : expand: '--nt-response=%{NEWAD:NT-Response:-00}' -> '--nt-response=4f9c442f0b6354e700fead1201e40ff173b80ee5d563d9bb' Detaching after fork from child process 18317. Re-wait 32 Re-wait 30 Re-wait 31 Re-wait 26 Re-wait 27 Re-wait 24 Re-wait 23 Re-wait 29 Re-wait 19 Re-wait 22 Re-wait 17 Re-wait 21 Re-wait 15 Re-wait 28 Re-wait 14 Re-wait 13 Re-wait 11 Re-wait 8 Re-wait 7 Re-wait 6 Re-wait 5 Re-wait 2 Re-wait 3 Re-wait 1 Re-wait 12 Re-wait 4 Re-wait 20 Re-wait 10 Re-wait 18 Re-wait 25 Re-wait 16 Exec: Program output is NT_KEY: 24D9FCB3BA61DE4D5CAC132146F92C7C (8) ERROR: NEWAD-realm : Exec: child returned 0 (8) NEWAD-realm : adding MS-CHAPv2 MPPE keys (8) [NEWAD-realm] = ok (8) - group returns ok (8) - if ("%{User-Name}" =~ /@/) returns reject rlm_eap_mschapv2: No MS-CHAPv2-Success or MS-CHAP-Error was found. (8) ERROR: eap : Failed continuing EAP MSCHAPv2 (26) session. EAP sub-module failed

Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0xb2addb90 (LWP 18292)] 0x00144b0f in eap_packet2vp (packet=0xa088998, eap=0x50) at src/modules/rlm_eap/libeap/eapcommon.c:259 259 total = eap->length[0] * 256 + eap->length[1]; (gdb) info threads 33 Thread 0xa44c6b90 (LWP 18315) 0x00110402 in kernel_vsyscall () 32 Thread 0xa4ec7b90 (LWP 18314) 0x00110402 in __kernel_vsyscall () 31 Thread 0xa58c8b90 (LWP 18313) 0x00110402 in kernel_vsyscall () 30 Thread 0xa62c9b90 (LWP 18312) 0x00110402 in kernel_vsyscall () 29 Thread 0xa6ccab90 (LWP 18311) 0x00110402 in __kernel_vsyscall () 28 Thread 0xa76cbb90 (LWP 18310) 0x00110402 in kernel_vsyscall () 27 Thread 0xa80ccb90 (LWP 18309) 0x00110402 in kernel_vsyscall () 26 Thread 0xa8acdb90 (LWP 18308) 0x00110402 in __kernel_vsyscall () 25 Thread 0xa94ceb90 (LWP 18307) 0x00110402 in kernel_vsyscall () 24 Thread 0xa9ecfb90 (LWP 18306) 0x00110402 in kernel_vsyscall () 23 Thread 0xaa8d0b90 (LWP 18305) 0x00110402 in __kernel_vsyscall () 22 Thread 0xab2d1b90 (LWP 18304) 0x00110402 in kernel_vsyscall () 21 Thread 0xabcd2b90 (LWP 18303) 0x00110402 in kernel_vsyscall () 20 Thread 0xac6d3b90 (LWP 18302) 0x00110402 in __kernel_vsyscall () 19 Thread 0xad0d4b90 (LWP 18301) 0x00110402 in kernel_vsyscall () 18 Thread 0xadad5b90 (LWP 18300) 0x00110402 in kernel_vsyscall () 17 Thread 0xae4d6b90 (LWP 18299) 0x00110402 in __kernel_vsyscall () 16 Thread 0xaeed7b90 (LWP 18298) 0x00110402 in kernel_vsyscall () 15 Thread 0xaf8d8b90 (LWP 18297) 0x00110402 in kernel_vsyscall () 14 Thread 0xb02d9b90 (LWP 18296) 0x00110402 in __kernel_vsyscall () 13 Thread 0xb0cdab90 (LWP 18295) 0x00110402 in kernel_vsyscall () 12 Thread 0xb16dbb90 (LWP 18294) 0x00110402 in __kernel_vsyscall () 11 Thread 0xb20dcb90 (LWP 18293) 0x00110402 in __kernel_vsyscall ()

• 10 Thread 0xb2addb90 (LWP 18292) 0x00144b0f in eap_packet2vp (packet=0xa088998, eap=0x50) at src/modules/rlm_eap/libeap/eapcommon.c:259 9 Thread 0xb34deb90 (LWP 18291) 0x00110402 in kernel_vsyscall () 8 Thread 0xb3edfb90 (LWP 18290) 0x00110402 in __kernel_vsyscall () 7 Thread 0xb48e0b90 (LWP 18289) 0x00110402 in kernel_vsyscall () 6 Thread 0xb52e1b90 (LWP 18288) 0x00110402 in kernel_vsyscall () 5 Thread 0xb5ce2b90 (LWP 18287) 0x00110402 in __kernel_vsyscall () 4 Thread 0xb66e3b90 (LWP 18286) 0x00110402 in kernel_vsyscall () 3 Thread 0xb70e4b90 (LWP 18285) 0x00110402 in kernel_vsyscall () 2 Thread 0xb7ae5b90 (LWP 18284) 0x00110402 in __kernel_vsyscall () 1 Thread 0xb7ff1a70 (LWP 18261) 0x00110402 in kernel_vsyscall () (gdb) thread apply all bt full

Thread 33 (Thread 0xa44c6b90 (LWP 18315)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa075800) at src/main/threads.c:567

    self = 0xa075800

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 32 (Thread 0xa4ec7b90 (LWP 18314)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa075740) at src/main/threads.c:567

    self = 0xa075740

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 31 (Thread 0xa58c8b90 (LWP 18313)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa075680) at src/main/threads.c:567

    self = 0xa075680

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available. ---Type to continue, or q to quit---

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 30 (Thread 0xa62c9b90 (LWP 18312)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa0755c0) at src/main/threads.c:567

    self = 0xa0755c0

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 29 (Thread 0xa6ccab90 (LWP 18311)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa075500) at src/main/threads.c:567

    self = 0xa075500

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 28 (Thread 0xa76cbb90 (LWP 18310)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa075440) at src/main/threads.c:567

    self = 0xa075440

---Type to continue, or q to quit---

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 27 (Thread 0xa80ccb90 (LWP 18309)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa075380) at src/main/threads.c:567

    self = 0xa075380

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 26 (Thread 0xa8acdb90 (LWP 18308)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa0752c0) at src/main/threads.c:567

    self = 0xa0752c0

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 25 (Thread 0xa94ceb90 (LWP 18307)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available. ---Type to continue, or q to quit---

2 0x08076c10 in request_handler_thread (arg=0xa075200) at src/main/threads.c:567

    self = 0xa075200

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 24 (Thread 0xa9ecfb90 (LWP 18306)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa075140) at src/main/threads.c:567

    self = 0xa075140

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 23 (Thread 0xaa8d0b90 (LWP 18305)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa075080) at src/main/threads.c:567

    self = 0xa075080

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 22 (Thread 0xab2d1b90 (LWP 18304)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available. ---Type to continue, or q to quit---

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074fc0) at src/main/threads.c:567

    self = 0xa074fc0

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 21 (Thread 0xabcd2b90 (LWP 18303)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074f00) at src/main/threads.c:567

    self = 0xa074f00

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 20 (Thread 0xac6d3b90 (LWP 18302)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074e40) at src/main/threads.c:567

    self = 0xa074e40

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 19 (Thread 0xad0d4b90 (LWP 18301)): ---Type to continue, or q to quit---

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074d80) at src/main/threads.c:567

    self = 0xa074d80

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 18 (Thread 0xadad5b90 (LWP 18300)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074cc0) at src/main/threads.c:567

    self = 0xa074cc0

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 17 (Thread 0xae4d6b90 (LWP 18299)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074c00) at src/main/threads.c:567

    self = 0xa074c00

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available. ---Type to continue, or q to quit---

Thread 16 (Thread 0xaeed7b90 (LWP 18298)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074b40) at src/main/threads.c:567

    self = 0xa074b40

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 15 (Thread 0xaf8d8b90 (LWP 18297)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074a80) at src/main/threads.c:567

    self = 0xa074a80

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 14 (Thread 0xb02d9b90 (LWP 18296)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa0749c0) at src/main/threads.c:567

    self = 0xa0749c0

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available. ---Type to continue, or q to quit---

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 13 (Thread 0xb0cdab90 (LWP 18295)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074900) at src/main/threads.c:567

    self = 0xa074900

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 12 (Thread 0xb16dbb90 (LWP 18294)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074840) at src/main/threads.c:567

    self = 0xa074840

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 11 (Thread 0xb20dcb90 (LWP 18293)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074780) at src/main/threads.c:567

    self = 0xa074780

---Type to continue, or q to quit---

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 10 (Thread 0xb2addb90 (LWP 18292)):

0 0x00144b0f in eap_packet2vp (packet=0xa088998, eap=0x50) at src/modules/rlm_eap/libeap/eapcommon.c:259

    total = 6
    size = 10
    ptr = 0x0
    head = 0x0
    tail = 0xb2adb4f4
    vp = 0xb2adb538

1 0x00461f8d in eap_compose (handler=0xa09a008) at src/modules/rlm_eap/eap.c:583

    vp = 0x6aa624
    eap_packet = 0x50
    request = 0xa0ae718
    eap_ds = 0xa086598
    reply = 0xa088b38
    rcode = 168322456

2 0x004629a6 in eap_fail (handler=0xa09a008) at src/modules/rlm_eap/eap.c:893

No locals.

3 0x0045ffca in mod_authenticate (instance=0x9a5c010, request=0xa0ae718) at src/modules/rlm_eap/rlm_eap.c:338

    inst = 0x9a5c010
    handler = 0xa09a008
    eap_packet = 0x0
    status = EAP_INVALID
    rcode = 136472920

4 0x0806c617 in call_modsingle (component=0, sp=0xa05f488, request=0xa0ae718) at src/main/modcall.c:305

    myresult = 134867615
    blocked = 0

5 0x0806d78e in modcall (component=0, c=0xa05f520, request=0xa0ae718) at src/main/modcall.c:795

    myresult = 0
    mypriority = 0

---Type to continue, or q to quit--- stack = {pointer = 1, priority = {0 <repeats 11 times>, 16, 131072, 0, 0, 0, 48, 135443906, 0, 0, 0, 2, 2, 3487793, 1681010688, 1701011813, 909521206, 939537462, 875980085, 876098610, 842425700, 1681090147}, result = {0, 0, 808464432, 808464432, 1714696240, 875848505, 1647339058, 875901750, 808466277, 1684104550, 825242674, 1714435173, 859255142, 1697658978, 895759973, 962868022, 808477282, 859190070, 1664497463, 859189300, 6, 7, 7, 825648434, 1697788726, 1647719735, 0, 0, 0, 3, 0, 0}, children = {0xa05f520, 0xa05f488, 0x0, 0x0, 0xa46061, 0x0, 0x0, 0xa455a6, 0x0, 0xa455a6, 0x0, 0x0, 0xb361f8, 0x160, 0xb2adbca3, 0x0, 0xa099bc0, 0x0, 0x0, 0xb36140, 0xa05f978, 0x0, 0x0, 0x1, 0xb06d02, 0x0, 0x0, 0x150, 0xa0afc78, 0x58, 0xb2adbce3, 0xb36170}, start = {0x0, 0xa05f488, 0xb36170, 0xb36140, 0x44, 0xb36140, 0xb34ff4, 0xa0afb28, 0xb34ff4, 0xa099b88, 0xb36140, 0xb2adbcc0, 0x116088, 0x0, 0x0, 0x811c9dc5, 0x0, 0xb2adbd60, 0x0, 0xb2adbcd8, 0x11cc0c, 0xb2adbd38, 0xa05f4f8, 0xb2adbce8, 0x12a3fc, 0xb2adbd38, 0xa05f4f8, 0xaa21a4, 0xa05f508, 0xa05f508, 0x0, 0xb2adbd08}} parent = 0xa05f520 child = 0xa05f488 sp = 0xa05f488 if_taken = 0 was_if = 0

6 0x0806a64c in indexed_modcall (comp=0, idx=6, request=0xa0ae718) at src/main/modules.c:713

    rcode = 6974464
    list = 0xa05f520
    server = 0xa05f030

7 0x0806bea4 in process_authenticate (auth_type=6, request=0xa0ae718) at src/main/modules.c:1548

No locals.

8 0x08051c19 in rad_check_password (request=0xa0ae718) at src/main/auth.c:253

    auth_type_pair = 0x0
    cur_config_item = 0x0
    auth_type = 6
    result = 0
    auth_type_count = 1

9 0x08052272 in rad_authenticate (request=0xa0ae718) at src/main/auth.c:530

    namepair = 0xa088350
    check_item = 0xa3ac5000
    auth_item = 0x0
    module_msg = 0x8067696
    tmp = 0xa088740

---Type to continue, or q to quit--- result = 7 password = 0x8097f80 "" autz_retry = 0 '\000' autz_type = 0

10 0x080527c3 in rad_virtual_server (request=0xa0ae718) at src/main/auth.c:684

    vp = 0x47aa6c
    result = -1297234968

11 0x00479147 in eappeap_process (handler=0xa089598, tls_session=0xa0897b8)

at src/modules/rlm_eap/types/rlm_eap_peap/peap.c:1034
    t = 0xa0867b0
    fake = 0xa0ae718
    vp = 0x0
    rcode = 0
    data = 0xa08d8e0 "\032\002\b"
    data_len = 73
    request = 0xa088d08
    eap_ds = 0xa085840

12 0x004764b2 in mod_authenticate (arg=0x9a5e888, handler=0xa089598)

at src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c:361
    rcode = 0
    status = FR_TLS_OK
    inst = 0x9a5e888
    tls_session = 0xa0897b8
    peap = 0xa0867b0
    request = 0xa088d08

13 0x0046124e in eap_module_call (module=0x9a61e78, handler=0xa089598) at src/modules/rlm_eap/eap.c:217

    rcode = 1
    request = 0xa088d08
    caller = 0x95c9538 "eap"

14 0x00461d63 in eap_method_select (inst=0x9a5c010, handler=0xa089598) at src/modules/rlm_eap/eap.c:474

    type = 0xa084144
    request = 0xa088d08
    next = PW_EAP_PEAP
    vp = 0xa089598

---Type to continue, or q to quit---

15 0x0045ffb6 in mod_authenticate (instance=0x9a5c010, request=0xa088d08) at src/modules/rlm_eap/rlm_eap.c:332

    inst = 0x9a5c010
    handler = 0xa089598
    eap_packet = 0x0
    status = 134867615
    rcode = 136472920

16 0x0806c617 in call_modsingle (component=0, sp=0xa04f0f0, request=0xa088d08) at src/main/modcall.c:305

    myresult = 134867615
    blocked = 0

17 0x0806d78e in modcall (component=0, c=0xa04f0a0, request=0xa088d08) at src/main/modcall.c:795

    myresult = 0
    mypriority = 0
    stack = {pointer = 1, priority = {0, 0, 845570870, 875783013, 1633891632, 812017201, 912680504, 1714761784, 
        862206050, 859137125, 909272677, 13412, 0, 0, 0, 0, 0, 135215523, 1, 0, 0, 3, 3, 3, 0, 0, 0, 0, 0, 0, 0, 0}, 
      result = {0 <repeats 20 times>, 6, 2, 2, 2, 0, 0, 0, 0, 0, 0, 0, 0}, children = {0xa04f0a0, 0xa04f0f0, 
        0x0 <repeats 18 times>, 0xa04f7c8, 0x0 <repeats 11 times>}, start = {0x0, 0xa04f0f0, 0x0, 0x0, 0x0, 0x0, 0x0, 
        0x0, 0x0, 0x0, 0x0, 0x0, 0x116088, 0x0, 0x0, 0x811c9dc5, 0x0, 0xb2adcd10, 0x0, 0xb2adcc88, 0x11cc0c, 
        0xb2adcce8, 0xa04f398, 0xb2adcc98, 0x12a3fc, 0xb2adcce8, 0xa04f398, 0xb2adcdcc, 0xa04f3a8, 0xa04f3a8, 0x0, 
        0xb2adccb8}}
    parent = 0xa04f0a0
    child = 0xa04f0f0
    sp = 0xa04f0f0
    if_taken = 0
    was_if = 0

18 0x0806a64c in indexed_modcall (comp=0, idx=6, request=0xa088d08) at src/main/modules.c:713

    rcode = 6974464
    list = 0xa04f0a0
    server = 0xa04ee60

19 0x0806bea4 in process_authenticate (auth_type=6, request=0xa088d08) at src/main/modules.c:1548

No locals.

20 0x08051c19 in rad_check_password (request=0xa088d08) at src/main/auth.c:253

    auth_type_pair = 0x0
    cur_config_item = 0x0
    auth_type = 6

---Type to continue, or q to quit--- result = 0 auth_type_count = 1

21 0x08052272 in rad_authenticate (request=0xa088d08) at src/main/auth.c:530

    namepair = 0xa0afa10
    check_item = 0xa0aea70
    auth_item = 0x0
    module_msg = 0x80b1374
    tmp = 0x0
    result = 2
    password = 0x8097f80 "<NO-PASSWORD>"
    autz_retry = 0 '\000'
    autz_type = 0

22 0x08080b85 in request_running (request=0xa088d08, action=1) at src/main/process.c:1193

    __FUNCTION__ = "request_running"

23 0x08076e65 in request_handler_thread (arg=0xa0746c0) at src/main/threads.c:634

    self = 0xa0746c0

24 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

25 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 9 (Thread 0xb34deb90 (LWP 18291)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074600) at src/main/threads.c:567

    self = 0xa074600

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 8 (Thread 0xb3edfb90 (LWP 18290)): ---Type to continue, or q to quit---

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074540) at src/main/threads.c:567

    self = 0xa074540

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 7 (Thread 0xb48e0b90 (LWP 18289)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074480) at src/main/threads.c:567

    self = 0xa074480

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 6 (Thread 0xb52e1b90 (LWP 18288)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa0743c0) at src/main/threads.c:567

    self = 0xa0743c0

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available. ---Type to continue, or q to quit---

Thread 5 (Thread 0xb5ce2b90 (LWP 18287)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074300) at src/main/threads.c:567

    self = 0xa074300

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 4 (Thread 0xb66e3b90 (LWP 18286)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074240) at src/main/threads.c:567

    self = 0xa074240

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 3 (Thread 0xb70e4b90 (LWP 18285)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa074180) at src/main/threads.c:567

    self = 0xa074180

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available. ---Type to continue, or q to quit---

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 2 (Thread 0xb7ae5b90 (LWP 18284)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00b4df55 in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0

No symbol table info available.

2 0x08076c10 in request_handler_thread (arg=0xa073940) at src/main/threads.c:567

    self = 0xa073940

3 0x00b47912 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

4 0x00ab160e in clone () from /lib/libc.so.6

No symbol table info available.

Thread 1 (Thread 0xb7ff1a70 (LWP 18261)):

0 0x00110402 in __kernel_vsyscall ()

No symbol table info available.

1 0x00aaa0d1 in select () from /lib/libc.so.6

No symbol table info available.

2 0x00132a0d in fr_event_loop (el=0xa060ee0) at src/lib/event.c:391

    i = 14
    rcode = 1
    maxfd = 45
    when = {tv_sec = 0, tv_usec = 117000}
    wake = 0xbfffe974
    read_fds = {fds_bits = {0, 16383, 0 <repeats 30 times>}}
    master_fds = {fds_bits = {0, 16383, 0 <repeats 30 times>}}

3 0x08087216 in radius_event_process () at src/main/process.c:4234

No locals.

4 0x080709c4 in main (argc=4, argv=0xbfffeb54) at src/main/radiusd.c:462

    rcode = 134943604
    argval = -1
    spawn_flag = 1

---Type to continue, or q to quit--- dont_fork = 1 write_pid = 0 flag = 0 act = {sigaction_handler = {sa_handler = 0x8070d9e , sa_sigaction = 0x8070d9e }, sa_mask = {val = {0 <repeats 32 times>}}, sa_flags = 0, sa_restorer = 0} (gdb)

[olivierbeytrison]

oh, you also caught the same as me #245 Been tracking it down but didn't find anything yet...

[alanbuxey]

mine wasnt stress test - just one or so auths per minute.

[olivierbeytrison]

On 25.03.2013 11:35, Alan Buxey wrote:

mine wasnt stress test - just one or so auths per minute.

I'll make some test by enabling again my nagios checks and see if it also happen on my side.

Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier@heliosnet.org

[alandekok]

Same as #245