segmentation fault in rlm_attr_rewrite and eaptls module

nikitha sumi.techno at gmail.com
Fri Apr 6 15:39:20 CEST 2007 

Hi All,

I am running freeradius-1.1.1 for quite a long time. Never seen this kind of
issue when few requests are sent to the radiusd.
The issue is when many requests are coming, then radiusd is crashing or
going in an infinite loop and hogging for 99.9% of CPU.

Please find the debug logs below.

  modcall[authorize]: module "preprocess" returns ok for request 1522
radius_xlat:  'anonymous'
rlm_attr_rewrite: Added attribute Stripped-User-Name with value 'anonymous'
  modcall[authorize]: module "copy_user_name" returns ok for request 1522
radius_xlat:  '^(.*[\/]+)'

Program received signal SIGSEGV, Segmentation fault.
0xb7df9693 in mallopt () from /lib/libc.so.6
(gdb) where
#0  0xb7df9693 in mallopt () from /lib/libc.so.6
#1  0xb7df877c in malloc () from /lib/libc.so.6
#2  0xb7e2a329 in re_comp () from /lib/libc.so.6
#3  0xb7e2a176 in re_comp () from /lib/libc.so.6
#4  0xb7e29c4f in regcomp () from /lib/libc.so.6
#5  0xb7b2e4d6 in do_attr_rewrite () from /usr/lib/rlm_attr_rewrite-1.1.1.so
#6  0xb7b2eb44 in attr_rewrite_authorize ()
   from /usr/lib/rlm_attr_rewrite-1.1.1.so
#7  0x08055f26 in module_post_auth ()
#8  0x0805660d in modcall ()
#9  0x08055f9a in module_post_auth ()
#10 0x0805609c in module_post_auth ()
#11 0x08056565 in modcall ()
#12 0x08055269 in find_module_instance ()
#13 0x08055b8a in module_authorize ()
#14 0x0804d7a1 in rad_authenticate ()
#15 0x08059d52 in rad_respond ()
#16 0x08059a22 in main ()

 and when i restarted the server the crash happened in eaptls module.

rad_recv: Access-Request packet from host 192.168.1.1:7988, id=114,
length=319
        User-Name = "anonymous"
        Called-Station-Id = "00-15-70-23-03-00:wpa_psk"
        Calling-Station-Id = "00-00-00-22-00-07"
        NAS-Port = 8
        NAS-Port-Type = Wireless-802.11
        Framed-MTU = 1400
        Service-Type = Framed-User
        NAS-IP-Address = 192.168.1.1
        NAS-Identifier = "Wireless Services"
        NAS-Port-Id = "wpa_psk"
        Connect-Info = "CONNECT 54Mbps 802.11g"
        State = 0x72fe4ac90661f9590e32dcb0c7059d75
        EAP-Message =
0x0202007019800000006616030100610100005d030146161ab12118da21a43b116bb44c8bed120272f7b2796c3976e35bd114643a5c00003600390038003500160013000a00330032002f0007006600050004006300620061001500120009006500640060001400110008000600030100
        Message-Authenticator = 0x9521947e080287f8034d050f25bc08ea
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 2652
  modcall[authorize]: module "preprocess" returns ok for request 2652
radius_xlat:  'anonymous'
rlm_attr_rewrite: Added attribute Stripped-User-Name with value 'anonymous'
  modcall[authorize]: module "copy_user_name" returns ok for request 2652
radius_xlat:  '^(.*[\/]+)'
rlm_attr_rewrite: No match found for attribute Stripped-User-Name with value
'anonymous'
  modcall[authorize]: module "add_dollar_sign" returns ok for request 2652
  modcall[authorize]: module "etc_passwd" returns notfound for request 2652
  modcall[authorize]: module "etc_group" returns notfound for request 2652
  modcall[authorize]: module "chap" returns noop for request 2652
  modcall[authorize]: module "mschap" returns noop for request 2652
    rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix_oblic" returns noop for request 2652
    rlm_realm: No '\' in User-Name = "anonymous", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix_oblic_fs" returns noop for request 2652
    rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "prefix_oblic" returns noop for request 2652
    rlm_realm: No '\' in User-Name = "anonymous", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "prefix_oblic_fs" returns noop for request 2652
    rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix_at" returns noop for request 2652
    rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "prefix_at" returns noop for request 2652
    rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix_percent" returns noop for request 2652
    rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "prefix_percent" returns noop for request 2652
    users: Matched entry anonymous at line 5
  modcall[authorize]: module "files" returns ok for request 2652
  rlm_eap: EAP packet type response id 2 length 112
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 2652
modcall: leaving group authorize (returns updated) for request 2652
  rad_check_password:  Found Auth-Type EAP
  rad_check_password:  Found Auth-Type EAP
Warning:  Found 2 auth-types on request for user 'anonymous'
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 2652
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/peap
  rlm_eap: processing type peap
  rlm_eap_peap: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls:  Length Included
  eaptls_verify returned 11

Program received signal SIGSEGV, Segmentation fault.
0xb7e86693 in mallopt () from /lib/libc.so.6
(gdb) where
#0  0xb7e86693 in mallopt () from /lib/libc.so.6
#1  0xb7e8577c in malloc () from /lib/libc.so.6
#2  0xb7bd8023 in eaptls_extract () from /usr/lib/libeap-1.1.1.so
#3  0xb7bd81fc in eaptls_process () from /usr/lib/libeap-1.1.1.so
#4  0xb7bc510f in eappeap_authenticate () from /usr/lib/rlm_eap_peap-
1.1.1.so
#5  0xb7bde4fe in eaptype_call () from /usr/lib/rlm_eap-1.1.1.so
#6  0xb7bde9bb in eaptype_select () from /usr/lib/rlm_eap-1.1.1.so
#7  0xb7bdda81 in eap_authenticate () from /usr/lib/rlm_eap-1.1.1.so
#8  0x08055f26 in module_post_auth ()
#9  0x0805660d in modcall ()
#10 0x08055f9a in module_post_auth ()
#11 0x0805609c in module_post_auth ()
#12 0x08056565 in modcall ()
#13 0x08055269 in find_module_instance ()
#14 0x08055bb2 in module_authenticate ()
#15 0x0804d43b in rad_check_password ()
#16 0x0804d9ac in rad_authenticate ()
#17 0x08059d52 in rad_respond ()
#18 0x08059a22 in main ()

Please let me know the details about this issue.
Awaiting for your reply..

Thanks,
Nikitha
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20070406/e30eb16c/attachment.html>

More information about the Freeradius-Users mailing list