3.0.x HEAD crashing

[Arran Cudbard-Bell]

On 18 Jun 2014, at 10:08, Herwin Weststrate <herwin at quarantainenet.nl> wrote:

> On 17-06-14 19:05, Arran Cudbard-Bell wrote:
>> 
>> On 17 Jun 2014, at 15:55, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
>> 
>>> On 17/06/14 15:33, Phil Mayers wrote:
>>> 
>>>> Will try and re-trigger under valgrind, though memcheck seems to report
>>>> a *lot* for 3.0.x head - many alloc-without-free for regexp compilations
>>>> at compile parse time and similar.
>>> 
>>> Ok, looks like use-after-free somewhere. Valgrind report is really really big, but it looks like the pertinent stuff is:
>> 
>> From the backtrace below we know it's a control attribute.
>> 
>> What modules are you using?
>> 
> 
> I've got a very similar crash with a nearly vanilla config. Logging and
> backtrace of it can be found at
> https://gist.github.com/qnet-herwin/8444b0f2e9304b9432a3
> 
> Got this error with 3.0.x (5187f6729b5ff51c5b10f3c4c8bd3da5db72e07b),
> with two simple changes to the config: disable the ssl check (debian)
> and enable the user bob from the users file, with the attribute
> Reply-Message. Then a simple PAP authentication attempt (even with a
> wrong password) crashes the server.

No, that's different and with older code. Could you run v3.0.x and see
if it still occurs.

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20140618/976ec1bb/attachment.pgp>