***SPAM*** RE: Windows Vista doing PEAP

[Michael Griego]

__LINE__ is an unsigned int... its being referenced in the patch as a  
string (%s as opposed to %u).

--Mike

On Oct 19, 2006, at 10:30 AM, King, Michael wrote:

> It seg faults when I do -X (or -sxx.  But not with -x)
>
> Here is the gdb log
>
>  rad2:/home/mking/freeradius-1.1.3/doc# more gdb-radiusd.log
> Starting program: /usr/sbin/freeradius -X
> [Thread debugging using libthread_db enabled]
> [New Thread 1077729984 (LWP 2603)]
>
> Program received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 1077729984 (LWP 2603)]
> 0x4018675b in strlen () from /lib/tls/libc.so.6
> * 1 Thread 1077729984 (LWP 2603)  0x4018675b in strlen () from /lib/ 
> tls/libc.so.6
> * 1 Thread 1077729984 (LWP 2603)  0x4018675b in strlen () from /lib/ 
> tls/libc.so.6
> * 1 Thread 1077729984 (LWP 2603)  0x4018675b in strlen () from /lib/ 
> tls/libc.so.6
> * 1 Thread 1077729984 (LWP 2603)  0x4018675b in strlen () from /lib/ 
> tls/libc.so.6
>
> Thread 1 (Thread 1077729984 (LWP 2603)):
> #0  0x4018675b in strlen () from /lib/tls/libc.so.6
> No symbol table info available.
> #1  0x4015a064 in vfprintf () from /lib/tls/libc.so.6
> No symbol table info available.
> #2  0x40178161 in vsnprintf () from /lib/tls/libc.so.6
> No symbol table info available.
> #3  0x08051805 in vradlog (lvl=-1073760198, fmt=0x4040528c "VISTA[% 
> s:%s]: here", ap=0xbfffd864 "µS@@U\001") at log.c:132
>         s = <value optimized out>
>         timeval = 1161271351
>         msgfd = (FILE *) 0xbfffb6ec
>         p = <value optimized out>
>         buffer = "Thu Oct 19 11:22:31 2006\n: Debug: VISTA 
> [eap_authenticate:ÿÿÿ3\000\000\000\230¸ÿ¿\000\200\001 at -¹ÿ¿4¯\027@ô 
> \217$@ \223$@ÀÚ<@\230¸ÿ¿ô\217$@ \
> 223$@\230¸ÿ¿\002\005\027@ \223$@È\204\006\b \223$@\001\000\000 
> \000èØÿ¿\224\031\005\b \223$@ \223$@ìO\006\b$Ùÿ¿ÿÿÿÿ6\000\000 
> \000ø¸ÿ¿\000\200\001@ظÿ¿ú¸ÿ¿ú¸ÿ¿
> \223$@ÀÚ<@ø¸ÿ¿Thu Oct "...
> #4  0x08051a4f in log_debug (msg=0x4040528c "VISTA[%s:%s]: here")  
> at log.c:205
>         ap = 0xbfffd864 "µS@@U\001"
>         r = 341
> #5  0x40402cb4 in eap_authenticate (instance=0x814ddd8,  
> request=0x8164170) at rlm_eap.c:341
>         vp = <value optimized out>
>         handler = (EAP_HANDLER *) 0x8165eb8
>         eap_packet = (eap_packet_t *) 0x0
>         rcode = <value optimized out>
>         __FUNCTION__ = "eap_authenticate"
> #6  0x08055ad8 in modcall (component=0, c=0x815ea00,  
> request=0x8164170) at modcall.c:236
>         myresult = 0
> #7  0x0805617c in call_one (component=341, p=0x40157393,  
> request=0x1, priority=0xbfffd964, result=0xbfffd968) at modcall.c:269
>         r = <value optimized out>
> #8  0x08055cca in modcall (component=0, c=0x815eb10,  
> request=0x8164170) at modcall.c:324
>         g = (modgroup *) 0x815eb10
>         myresult = 0
> #9  0x08053d2e in indexed_modcall (comp=0, idx=1075147667,  
> request=0x8164170) at modules.c:469
>         this = (indexed_modcallable *) 0x8159710
> #10 0x0804ce93 in rad_check_password (request=0x8164170) at auth.c:367
>         dval = (DICT_VALUE *) 0x155
>         auth_type_pair = <value optimized out>
>         cur_config_item = <value optimized out>
>         password_pair = (VALUE_PAIR *) 0x0
>         auth_item = <value optimized out>
>         string = "\005\bðP\006\b\005@\006\b at w\a\bàL\006\b\000\000 
> \000\000ô_\001@¡º\022@\000\000\000\000¨b\004@\002\000\000\000\aVF@ ` 
> \001@ô_\001@¡º\022 at 7\230
> 7EÈ\204\006\b\nM\006\bÐu\a\bHÚÿ¿O\032\005\b\001\000\000\000PP\006 
> \bTÚÿ¿|a\005\b\001\000\000\000à\024\026\bpA\026\bÈ\204\006\bTÚÿ¿È 
> \204\006\b¨Úÿ¿\\]\005\bPP\0
> 06\bk6\006\bÐu\a\b\nM\006\b\000\000\000\000|f\000 at 7\2307E\230Úÿ¿ 
> \224Úÿ¿\b\000\000\000¨Úÿ¿p\221\025\b\001\000\000\000,H\006\b\000\000 
> \000\000ô_\001@`m\004@\00
> 4\000"...
>         auth_type = 6
>         result = <value optimized out>
>         auth_type_count = 1
> #11 0x0804d3bf in rad_authenticate (request=0x8164170) at auth.c:662
>         check_item = <value optimized out>
>         vp = (VALUE_PAIR *) 0x40157393
>         namepair = (VALUE_PAIR *) 0x8164270
>         check_item = <value optimized out>
>         reply_item = <value optimized out>
>         auth_item = (VALUE_PAIR *) 0x0
>         module_msg = <value optimized out>
>         tmp = (VALUE_PAIR *) 0x0
>         result = 3
>         r = <value optimized out>
>         umsg = "çÿ¿çz\000@\020çÿ¿Pf\001@\004\000\000\000\000\000\000 
> \000\001\000\000\000\000\000\000\000\001\000\000\000ô\217$@<\000\000 
> \000 \223$@¤æÿ¿\037¨\
> 027@\n\000\000\000Èæÿ¿(±\027@ \223$@Pçÿ¿ød\001@ ¡\004\b$É\b\b \227$ 
> \000\000\000\000\000øæÿ¿-2\006@¸@\026\b\024\000\000\000hï\006@ \223 
> $@øæÿ¿9|\027@ \223$@hï\
> 006@ \227$@`T\026\bxçÿ¿¶a\006@¸@\026\b\024\000\000\000\020\000\000 
> \000\002\000\000\000D\232\005@¨b\004@ô_\001@ød\001@\001\000\000 
> \000`çÿ¿é²\000@¤f\001@\000".
> ..
>         user_msg = <value optimized out>
>         exec_program = <value optimized out>
>         exec_wait = <value optimized out>
>         seen_callback_id = <value optimized out>
>         buf = "Ôúÿ¿\002\000\000\000\000\000\000\000ô_\001@üÿÿÿ\b\000 
> \000\000\230ßÿ¿%¹\000@àúÿ¿ÀgG@\000\000\000\000`m\004@Ôúÿ¿\002\000 
> \000\000P;\026\b¨hG@äd\0
> 01@\b\000\000\000\213¸\000@ô\217$@À\\\001 at P;\026\b\bàÿ¿\a¿!@àúÿ¿ü< 
> \026\b\001\000\000\000\000\000\000\000\b\211t$°´\000@\000\000\000 
> \000ð\210\000@\223Ñ\027@¨:
> \026\b\001\000\000\200Nò\026 at Påÿ¿Påÿ¿\000\000\000\000ô\217$@:È\006@ 
> \000\000\000\000äåÿ¿\037o\025@\000æÿ¿:È\006@", '\0' <repeats 12  
> times>, " `\001@èj"...
>         logstr = "P;\026\b\203fG@ðâÿ¿\025\000\000\000|Ûÿ¿\223Ñ 
> \027@ðâÿ¿`T\026\bNò\026@¼È\006@¼È\006@\000\000\000\000ô\217$@»È\006@ 
> \001\000\000\000xáÿ¿\037o\0
> 25@\234áÿ¿»È\006@\001\000\000\000\000\000\000\000\004\000\000\000P; 
> \026\bèj\025@ø¨$@\000:\026\bPáÿ¿)\000\000\000ø¤$@äàÿ¿@\"\000\000dÛ 
> \000@\000\000\000\000\00
> 5\000\000\000\0000\000\000\000@\000\000\000\000\000\000Ð4\000 
> \0000âÿ¿(\216$@Ò?\026\b-\000\000\000\024Üÿ¿\223Ñ\027@Ò?\026\b\000 
> \000\000\000ÿÿÿÿ\030\000\000\00
> 0¼È\006@¶È\006@"...
>         autz_retry = 0 '\0'
>         autz_type = <value optimized out>
> #12 0x08057347 in rad_respond (request=0x8164170, fun=0x804d150  
> <rad_authenticate>) at radiusd.c:1653
>         rcode = <value optimized out>
>         packet = <value optimized out>
>         original = <value optimized out>
>         secret = 0x8164194 "d0wnh1ll"
>         finished = <value optimized out>
>         reprocess = <value optimized out>
> #13 0x080591f6 in main (argc=2, argv=0xbffffad4) at radiusd.c:1427
>         cl = <value optimized out>
>         fun = (RAD_REQUEST_FUNP) 0x804d150 <rad_authenticate>
>         request = (REQUEST *) 0x8164170
>         packet = (RADIUS_PACKET *) 0x8164078
>         secret = (u_char *) 0x81454c0 "d0wnh1ll"
>         buffer = "*", '\0' <repeats 651 times>, "\221ü\000@", '\0'  
> <repeats 12 times>, "\221ü\000@\000\000\000\000\000\220;@Øëÿ¿0Î<@ 
> \034íÿ¿åQ\000@,Î<@\000\00
> 0\000\000\004\000\000\000\022\b\000\000\a\000\000\000\000 \001\000 
> \001\000\000\000ød\001@èëÿ¿û\206\000@ ¸'@°µ'@\023\000\000\000\001 
> \000\000\000\\Ù)@°µ'@\000\
> 000\000\000\0000\001\000d+\001\000d+\001\000\000\000\000\000\005\000 
> \000\000\0000\001\000\000@\001\000,>\001\0000>\001\000\034íÿ\000¨l 
> \004@\fìÿ¿YÀ\000@\211\2
> 33;@´l\004@ô_\001 at hj\004 at lH\021@\214îÿ¿|f\000"...
>         readfds = {fds_bits = {128, 0 <repeats 31 times>}}
>         argval = <value optimized out>
>         pid = <value optimized out>
>         max_fd = <value optimized out>
>         status = <value optimized out>
>         tv = (struct timeval *) 0x0
>         act = {__sigaction_handler = {sa_handler = 0x8057100  
> <sig_fatal>, sa_sigaction = 0x8057100 <sig_fatal>}, sa_mask =  
> {__val = {
>       0 <repeats 32 times>}}, sa_flags = 0, sa_restorer = 0}
>         listener = <value optimized out>
> The program is running.  Exit anyway? (y or n)
> rad2:/home/mking/freeradius-1.1.3/doc#
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ 
> users.html