1.1.5 double free or corruption

[Thor Spruyt]

Hi,

I have built freeradius-1.1.5 with mysql, ldap and openssl on CentOS 4.4
Everything looks ok (configure, make, make install), but when running the 
server, it dies.


[thor at byze freeradius-1.1.5]$ sudo /opt/freeradius-1.1.5-1/sbin/radiusd -X
Starting - reading configuration files ...
reread_config:  reading radiusd.conf
Config:   including file: /opt/freeradius-1.1.5-1/etc/raddb/proxy.conf
Config:   including file: /opt/freeradius-1.1.5-1/etc/raddb/clients.conf
Config:   including file: /opt/freeradius-1.1.5-1/etc/raddb/snmp.conf
Config:   including file: /opt/freeradius-1.1.5-1/etc/raddb/eap.conf
Config:   including file: /opt/freeradius-1.1.5-1/etc/raddb/sql.conf
 main: prefix = "/opt/freeradius-1.1.5-1"
 main: localstatedir = "/opt/freeradius-1.1.5-1/var"
 main: logdir = "/opt/freeradius-1.1.5-1/var/log/radius"
 main: libdir = "/opt/freeradius-1.1.5-1/lib"
 main: radacctdir = "/opt/freeradius-1.1.5-1/var/log/radius/radacct"
 main: hostname_lookups = no
 main: max_request_time = 30
 main: cleanup_delay = 5
 main: max_requests = 1024
 main: delete_blocked_requests = 0
 main: port = 0
 main: allow_core_dumps = no
 main: log_stripped_names = no
 main: log_file = "/opt/freeradius-1.1.5-1/var/log/radius/radius.log"
 main: log_auth = no
 main: log_auth_badpass = no
 main: log_auth_goodpass = no
 main: pidfile = "/opt/freeradius-1.1.5-1/var/run/radiusd/radiusd.pid"
 main: user = "(null)"
 main: group = "(null)"
 main: usercollide = no
 main: lower_user = "no"
 main: lower_pass = "no"
 main: nospace_user = "no"
 main: nospace_pass = "no"
 main: checkrad = "/opt/freeradius-1.1.5-1/sbin/checkrad"
 main: proxy_requests = yes
 proxy: retry_delay = 5
 proxy: retry_count = 3
 proxy: synchronous = no
 proxy: default_fallback = yes
 proxy: dead_time = 120
 proxy: post_proxy_authorize = no
 proxy: wake_all_if_all_dead = no
 security: max_attributes = 200
 security: reject_delay = 1
 security: status_server = no
 main: debug_level = 0
read_config_files:  reading dictionary
read_config_files:  reading naslist
Using deprecated naslist file.  Support for this will go away soon.
read_config_files:  reading clients
read_config_files:  reading realms
radiusd:  entering modules setup
Module: Library search path is /opt/freeradius-1.1.5-1/lib
*** glibc detected *** double free or corruption (fasttop): 0x098a55d8 ***
Aborted



If it helps, here's the end of an strace:
open("/opt/freeradius-1.1.5-1/etc/raddb/realms", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0640, st_size=187, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 
0xb7f76000
read(3, "#\n#\tTHIS FILE IS DEPRECATED.\n#\n#"..., 4096) = 187
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb7f76000, 4096)                = 0
getrlimit(RLIMIT_CORE, {rlim_cur=0, rlim_max=RLIM_INFINITY}) = 0
stat64("/opt/freeradius-1.1.5-1/var/log/radius", {st_mode=S_IFDIR|0700, 
st_size=4096, ...}) = 0
getgid32()                              = 0
open("/etc/services", O_RDONLY)         = 3
fcntl64(3, F_GETFD)                     = 0
fcntl64(3, F_SETFD, FD_CLOEXEC)         = 0
fstat64(3, {st_mode=S_IFREG|0644, st_size=20373, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 
0xb7f76000
read(3, "# /etc/services:\n# $Id: services"..., 4096) = 4096
read(3, "123/tcp\nntp\t\t123/udp\t\t\t\t# Networ"..., 4096) = 4096
read(3, "\t\t873/tcp\t\t\t\t# rsync\nrsync\t\t873/"..., 4096) = 4096
close(3)                                = 0
munmap(0xb7f76000, 4096)                = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 3
bind(3, {sa_family=AF_INET, sin_port=htons(1812), 
sin_addr=inet_addr("0.0.0.0")}, 16) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
bind(4, {sa_family=AF_INET, sin_port=htons(1813), 
sin_addr=inet_addr("0.0.0.0")}, 16) = 0
time(NULL)                              = 1173470425
write(1, "radiusd:  entering modules setup"..., 33radiusd:  entering modules 
setup
) = 33
time(NULL)                              = 1173470425
write(1, "Module: Library search path is /"..., 59Module: Library search 
path is /opt/freeradius-1.1.5-1/lib
) = 59
open("/opt/freeradius-1.1.5-1/lib/rlm_exec.la", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0755, st_size=895, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 
0xb7f76000
read(5, "# rlm_exec.la - a libtool librar"..., 4096) = 895
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb7f76000, 4096)                = 0
futex(0xa98060, FUTEX_WAKE, 2147483647) = 0
open("/opt/freeradius-1.1.5-1/lib/rlm_exec.a", O_RDONLY) = 5
read(5, "!<arch>\n/               11734703"..., 512) = 512
close(5)                                = 0
open("/opt/freeradius-1.1.5-1/lib/rlm_exec-1.1.5.so", O_RDONLY) = 5
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\270\10"..., 512) = 
512
fstat64(5, {st_mode=S_IFREG|0755, st_size=17018, ...}) = 0
old_mmap(NULL, 9308, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 
0xf7a000
old_mmap(0xf7c000, 4096, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x1000) = 0xf7c000
close(5)                                = 0
open("/dev/tty", O_RDWR|O_NONBLOCK|O_NOCTTY) = 5
writev(5, [{"*** glibc detected *** ", 23}, {"double free or corruption 
(fastt"..., 35}, {": 0x", 4}, {"080f95d8", 8}, {" ***\n", 5}], 5*** glibc 
detected *** double free or corruption (fasttop): 0x080f95d8 ***
) = 75
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(26392, 26392, SIGABRT)           = 0
--- SIGABRT (Aborted) @ 0 (0) ---
+++ killed by SIGABRT +++
Process 26392 detached



--
Thor Spruyt
M: +32 475 67 22 65
E: thor.spruyt at telenet.be
W: www.thor-spruyt.com