<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:garamond,new york,times,serif;font-size:12pt"><div><br>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="ProgId" content="Word.Document"><meta name="Generator" content="Microsoft Word 11"><meta name="Originator" content="Microsoft Word 11"><link rel="File-List" href="file:///C:%5CDOCUME%7E1%5Cmarvani%5CLOCALS%7E1%5CTemp%5Cmsohtml1%5C01%5Cclip_filelist.xml"><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]--><style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style>
<![endif]-->
<p class="MsoNormal">Hello Alan,</p><p class="MsoNormal"><br>
Thanks so much for your answer.<br style="">
<!--[if !supportLineBreakNewLine]--><br style="">
<!--[endif]--></p>
<p class="MsoNormal">Below, you can find the additionally information about us
problem :<br>
<br>
- which OS && CPU (32 / 64-bit) --->
<b>CentOs 5.2 -
CPU: 32 bits</b><br>
- which version of the server - <b>-->
2.1.6</b><br>
- which command line was used to run the server --> <b>./radiusd</b><br>
- is this reproducible in non-threaded mode (radiusd -fs) <b>- we did not try
because we needed performance<br>
</b><br>
We have a question for you :</p>
<p class="MsoNormal"><br>
Why is not there a protection for "null pointer" to avoid this kind
of problem?<br>
<br>
Best Regards,<br>
Fabiana</p>
<br>
<br>
------------------------------------------------------------------------------------------------------------------------------------------------<br>
<ul><li><em>To</em>: FreeRadius users mailing list <<a href="mailto:freeradius-users%40lists.freeradius.org">freeradius-users@lists.freeradius.org</a>></li><li><em>Subject</em>: Re: Crash due to fr_packet_cmp</li><li><em>From</em>: Alan DeKok <<a href="mailto:aland%40deployingradius.com">aland@deployingradius.com</a>></li><li><em>Date</em>: Sun, 15 Nov 2009 21:19:55 +0100</li><li><em>In-reply-to</em>: <<a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/msg00323.html">828995.26169.qm@web26202.mail.ukl.yahoo.com</a>></li><li><em>References</em>: <<a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/msg00323.html">828995.26169.qm@web26202.mail.ukl.yahoo.com</a>></li><li><em>Reply-to</em>: FreeRadius users mailing list <<a href="mailto:freeradius-users%40lists.freeradius.org">freeradius-users@lists.freeradius.org</a>></li><li><em>User-agent</em>: Thunderbird 2.0.0.23
(Macintosh/20090812)</li></ul>
<!--X-Head-of-Message-End-->
<!--X-Head-Body-Sep-Begin-->
<hr>
<!--/htdig_noindex-->
<!--X-Head-Body-Sep-End-->
<!--X-Body-of-Message-->
<pre>fabiana marvani wrote:<br>> After some time with load the freeradius crashes<br>> <br>> We first noticed this crash with our plugins activated, but then we deactivated<br>> all plugins and used "default" configuration:<br><br> There have been a few reports similar to this. They all require<br>sending the server many 10s of millions of packets over a long time.<br>This makes it hard to reproduce && debug.<br><br> It's likely a race condition. But it's hard to say where, or why.<br><br>> core.8555<br>> Program terminated with signal 11, Segmentation fault.<br>> (gdb) bt<br>> #0 fr_packet_cmp (a=0xb4897cd8, b=0x0) at packet.c:139<br>...<br>> #6 0x0806cf83 in received_request (listener=0x8d4f608, packet=0xb4897cd8,<br>> prequest=0xbf89d0dc, client=0x8d2fc80)<br>> at event.c:2723<br><br> The server keeps all packets in a hash, to ensure it catches<br>duplicates, etc. The hash is keyed by the source
packet (src/dst<br>ip/port). The crash comes because the "request" structure is still in<br>the hash, though the "packet" entry in that structure has become NULL.<br><br> The only problem is... the packet entry is *only* set to NULL after<br>the request has been deleted from hash. And *only* the main thread<br>adds/deletes entries to the hash. And *only* the main thread allocates<br>or free's request data structures.<br><br> So this is a problem that should be avoided completely by the design<br>of the server.<br><br> Some questions:<br><br>- which OS && CPU (32 / 64-bit)<br>- which version of the server<br>- which command line was used to run the server<br>- is this reproducible in non-threaded mode (radiusd -fs)<br><br> If you are using an older version of the server, please also try with<br>the current git "stable" branch (see git.freeradius.org). It has some<br>changes which give it only one code path for doing certain kinds
of<br>request mangling. This makes it less likely for there to be errors,<br>race conditions, etc.<br><br> Alan DeKok.<br><br></pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<!--htdig_noindex-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul><li><strong><a name="00323" href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/msg00323.html">Crash due to fr_packet_cmp</a></strong>
<ul><li><em>From:</em> fabiana marvani <fabiana_marvani@yahoo.it></li></ul></li></ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul><li>Previous by Date: <a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/msg00346.html"> Re: DHCP in FR </a></li><li>Next by Date: <a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/msg00348.html"> Re: DHCP in FR </a></li><li>Previous by Thread: <a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/msg00323.html"> Crash due to fr_packet_cmp </a></li><li>Next by Thread: <a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/msg00294.html"> Deprecate the X-Ascend-* attributes in dictionary.ascend? </a></li><li>
Freeradius-Users November 2009 archives indexes sorted by: <a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/thread.html">[ thread ]</a>
<a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/subject.html">[ subject ]</a>
<a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/author.html">[ author ]</a>
<a href="http://lists.cistron.nl/pipermail/freeradius-users/2009-November/date.html">[ date ]</a>
</li><li>
Freeradius-Users list archive <a href="http://lists.cistron.nl/pipermail/freeradius-users/index.html">Table of Contents</a>
</li><li>
<a href="http://lists.freeradius.org/mailman/listinfo/freeradius-users">More information about the Freeradius-Users mailing list </a>
</li></ul>
</div>
<!-- cg11.c41.mail.ird.yahoo.com compressed/chunked Wed Nov 18 01:11:46 PST 2009 -->
</div><br>
</body></html>