Segfault with EAP-PEAP/MSCHAPv2

[Paul A Roberts]

This is the core dump.  FreeBSD 6.1 host, 1.1.2 FreeRadius.  Authenticates fine using NTRadPing with MS-CHAP but crashes each time trying to authenticate from an XP box using EAP-PEAP/MS-CHAPv2.

cat gdb-radiusd.log

* 8 LWP 100065  0x280ac4ab in pthread_testcancel ()
   from /usr/lib/libpthread.so.2
  7 Thread 0x8077000 (runnable)  0x282e775f in select () from /lib/libc.so.6
  6 Thread 0x8143000 (LWP 100061)  0x280ac46b in pthread_testcancel ()
   from /usr/lib/libpthread.so.2
  5 Thread 0x8143200 (sleeping)  0x280a4f0f in pthread_mutexattr_init ()
   from /usr/lib/libpthread.so.2
  4 Thread 0x8143400 (sleeping)  0x280a4f0f in pthread_mutexattr_init ()
   from /usr/lib/libpthread.so.2
  3 Thread 0x8143600 (runnable)  0x281db323 in sk_value ()
   from /lib/libcrypto.so.4
  2 Thread 0x8143800 (sleeping)  0x280a4f0f in pthread_mutexattr_init ()
   from /usr/lib/libpthread.so.2
  1 Thread 0x8143a00 (sleeping)  0x280a4f0f in pthread_mutexattr_init ()
   from /usr/lib/libpthread.so.2

Thread 8 (LWP 100065):
#0  0x280ac46b in pthread_testcancel () from /usr/lib/libpthread.so.2
No symbol table info available.
#1  0x280a4e3c in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#2  0x2808e450 in ?? ()
No symbol table info available.

Thread 7 (Thread 0x8077000 (runnable)):
#0  0x282e775f in select () from /lib/libc.so.6
No symbol table info available.
#1  0x2809503d in select () from /usr/lib/libpthread.so.2
No symbol table info available.
#2  0x08056231 in main ()
No symbol table info available.

Thread 6 (Thread 0x8143000 (LWP 100061)):
#0  0x280ac46b in pthread_testcancel () from /usr/lib/libpthread.so.2
No symbol table info available.
#1  0x280a4e3c in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#2  0x2808e450 in ?? ()
No symbol table info available.

Thread 5 (Thread 0x8143200 (sleeping)):
#0  0x280a4f0f in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#1  0x280a50a3 in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#2  0x280a96b1 in _pthread_cond_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#3  0x280a9bfa in pthread_cond_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#4  0x28094d6f in sem_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#5  0x0805a95f in smux_start ()
No symbol table info available.
#6  0x2809d319 in pthread_create () from /usr/lib/libpthread.so.2
No symbol table info available.
#7  0x282cf637 in _ctx_start () from /lib/libc.so.6
No symbol table info available.

Thread 4 (Thread 0x8143400 (sleeping)):
#0  0x280a4f0f in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#1  0x280a50a3 in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#2  0x280a96b1 in _pthread_cond_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#3  0x280a9bfa in pthread_cond_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#4  0x28094d6f in sem_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#5  0x0805a95f in smux_start ()
No symbol table info available.
#6  0x2809d319 in pthread_create () from /usr/lib/libpthread.so.2
No symbol table info available.
#7  0x282cf637 in _ctx_start () from /lib/libc.so.6
No symbol table info available.

Thread 3 (Thread 0x8143600 (runnable)):
#0  0x281db323 in sk_value () from /lib/libcrypto.so.4
No symbol table info available.
#1  0x28464f8c in ssl3_output_cert_chain () from /usr/local/lib/libssl.so
No symbol table info available.

Thread 2 (Thread 0x8143800 (sleeping)):
#0  0x280a4f0f in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#1  0x280a50a3 in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#2  0x280a96b1 in _pthread_cond_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#3  0x280a9bfa in pthread_cond_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#4  0x28094d6f in sem_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#5  0x0805a95f in smux_start ()
No symbol table info available.
#6  0x2809d319 in pthread_create () from /usr/lib/libpthread.so.2
No symbol table info available.
#7  0x282cf637 in _ctx_start () from /lib/libc.so.6
No symbol table info available.

Thread 1 (Thread 0x8143a00 (sleeping)):
#0  0x280a4f0f in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#1  0x280a50a3 in pthread_mutexattr_init () from /usr/lib/libpthread.so.2
No symbol table info available.
#2  0x280a96b1 in _pthread_cond_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#3  0x280a9bfa in pthread_cond_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#4  0x28094d6f in sem_wait () from /usr/lib/libpthread.so.2
No symbol table info available.
#5  0x0805a95f in smux_start ()
No symbol table info available.
#6  0x2809d319 in pthread_create () from /usr/lib/libpthread.so.2
No symbol table info available.
#7  0x282cf637 in _ctx_start () from /lib/libc.so.6
No symbol table info available.
#0  0x280ac46b in pthread_testcancel () from /usr/lib/libpthread.so.2

-----Original Message-----
>From: Alan DeKok <aland at deployingradius.com>
>Sent: Sep 25, 2006 7:36 AM
>To: Paul A Roberts <proberts at teleport.com>, FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
>Subject: Re: Segfault with EAP-PEAP/MSCHAPv2 
>
>Paul A Roberts <proberts at teleport.com> wrote:
>> Segmentation fault (core dumped)
>
>  doc/bugs describes what to do.
>
>  Alan DeKok.
>--
>  http://deployingradius.com       - The web site of the book
>  http://deployingradius.com/blog/ - The blog