Crash in proxy code

[Tuyan Ozipek]

Hi all,
i am using the latest cvs that i checked out a few minutes ago,
with a basic setup with

tuyan	Proxy-To-Realm := radius

in users file, and a proxy realm in proxy.conf for server called
"radius", i ended up having a crash. Note that there is no server
running on the ip that i put in the proxy.conf.. 

Here is the gdb trace


Tue Sep 26 12:38:52 2006 : Debug: modcall: group authorize returns noop
for request 0
Tue Sep 26 12:38:52 2006 : Debug:  proxy: allocating destination
192.168.4.52 port 1645 - Id 239
Sending Access-Request of id 239 to 192.168.4.52 port 1645
        User-Name = "tuyan"
        User-Password = "tuyan"
        NAS-IP-Address = 192.168.4.100
        NAS-Port = 654645
        Proxy-State = 0x313733
Tue Sep 26 12:38:52 2006 : Error: Assertion failed in listen.c, line 620

Program received signal SIGABRT, Aborted.
[Switching to Thread -1246864480 (LWP 20387)]
0xffffe410 in __kernel_vsyscall ()
(gdb) thread apply all bt full

Thread 6 (Thread -1246864480 (LWP 20387)):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7b477d0 in raise () from /lib/libc.so.6
No symbol table info available.
#2  0xb7b48ea3 in abort () from /lib/libc.so.6
No symbol table info available.
#3  0x08061c2b in rad_assert_fail (file=0x8065f5d "listen.c", line=620)
at util.c:347
No locals.
#4  0x08053a8e in proxy_socket_send (listener=0x814f130,
request=0x815d3b0) at listen.c:620
        sock = (listen_socket_t *) 0x814f160
#5  0x0806147e in request_handler_thread (arg=0x815d1f8) at
threads.c:520
        finished = 0
        fun = (RAD_REQUEST_FUNP) 0x804d570 <rad_authenticate>
        set = {__val = {16391, 0 <repeats 31 times>}}
#6  0xb7eb734b in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#7  0xb7bdc65e in clone () from /lib/libc.so.6
No symbol table info available.

Thread 5 (Thread -1238471776 (LWP 20386)):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7ebc75f in sem_wait at GLIBC_2.0 () from /lib/libpthread.so.0
No symbol table info available.
#2  0x0806110e in request_handler_thread (arg=0x815d140) at
threads.c:464
        finished = -1238473764
        fun = (RAD_REQUEST_FUNP) 0
        set = {__val = {16391, 0 <repeats 31 times>}}
#3  0xb7eb734b in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#4  0xb7bdc65e in clone () from /lib/libc.so.6
No symbol table info available.

Thread 4 (Thread -1230079072 (LWP 20385)):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7ebc75f in sem_wait at GLIBC_2.0 () from /lib/libpthread.so.0
No symbol table info available.
#2  0x0806110e in request_handler_thread (arg=0x815d088) at
threads.c:464
        finished = -1230081060
        fun = (RAD_REQUEST_FUNP) 0
        set = {__val = {16391, 0 <repeats 31 times>}}
#3  0xb7eb734b in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#4  0xb7bdc65e in clone () from /lib/libc.so.6
No symbol table info available.

Thread 3 (Thread -1221686368 (LWP 20384)):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7ebc75f in sem_wait at GLIBC_2.0 () from /lib/libpthread.so.0
No symbol table info available.
#2  0x0806110e in request_handler_thread (arg=0x815cfd0) at
threads.c:464
        finished = -1221688356
---Type <return> to continue, or q <return> to quit---
        fun = (RAD_REQUEST_FUNP) 0
        set = {__val = {16391, 0 <repeats 31 times>}}
#3  0xb7eb734b in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#4  0xb7bdc65e in clone () from /lib/libc.so.6
No symbol table info available.

Thread 2 (Thread -1213293664 (LWP 20383)):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7ebc75f in sem_wait at GLIBC_2.0 () from /lib/libpthread.so.0
No symbol table info available.
#2  0x0806110e in request_handler_thread (arg=0x815cf18) at
threads.c:464
        finished = -1213295652
        fun = (RAD_REQUEST_FUNP) 0x1000000
        set = {__val = {16391, 0 <repeats 31 times>}}
#3  0xb7eb734b in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#4  0xb7bdc65e in clone () from /lib/libc.so.6
No symbol table info available.

Thread 1 (Thread -1213077840 (LWP 20380)):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7bd5d11 in ___newselect_nocancel () from /lib/libc.so.6
No symbol table info available.
#2  0x0805c16f in main (argc=3, argv=0xbfaa3604) at radiusd.c:596
        tv = {tv_sec = 0, tv_usec = 992000}
        request = (REQUEST *) 0x815d358
        buffer = "* port 1814", '\0' <repeats 633 times>, "I\uffff\uffff
\uffff\uffff\003\uffff\uffff\uffff\uffff\uffff\uffff\uffff\177\uffff
\uffff \203\uffff\uffff\000\000\000\000d)\uffff\uffff\uffffO\uffff
\uffff", '\0' <repeats 24 times>, "\uffff\003\uffff\uffff\000\000\000
\000 \200\uffff\uffff", '\0' <repeats 13 times>, "\uffff÷", '\0'
<repeats 48 times>, "I\uffff\uffff\uffff7\b\u0137\uffff\uffff\uffff
\uffff\uffff\177\uffff\uffff \203\uffff\uffff\000\000\000\000
\uffff)\uffff\uffff\uffffO\uffff\uffff-\b\u0137E\b\u0137", '\0' <repeats
16 times>, "7\b\u0137\000\000\000\000 \200\uffff\uffff", '\0' <repeats
12 times>, "\uffffl\uffff\uffff", '\0' <repeats 20 times>, "E\b\u0137",
'\0' <repeats 28 times>, "I\uffff"...
        readfds = {__fds_bits = {448, 0 <repeats 31 times>}}
        argval = <value optimized out>
        pid = <value optimized out>
        max_fd = <value optimized out>
        status = <value optimized out>
        sleep_time = 1
        spawn_flag = 1
        dont_fork = 1
        last_cleaned_lists = <value optimized out>
        act = {__sigaction_handler = {sa_handler = 0x805c700
<sig_fatal>, sa_sigaction = 0x805c700 <sig_fatal>}, sa_mask = {__val = {
      0 <repeats 32 times>}}, sa_flags = 0, sa_restorer = 0}
        listener = <value optimized out>
#0  0xffffe410 in __kernel_vsyscall ()
(gdb)


Cheers

-- 
Tuyan Ozipek <tuyan at suntel.com.tr>