View Issue Details

IDProjectCategoryView StatusLast Update
0003248unrealircdpublic2007-04-27 03:11
ReporterstskeepsAssigned To 
PrioritynormalSeveritycrashReproducibilityhave not tried
Status closedResolutionunable to duplicate 
Product Version3.2.6 
Summary0003248: Crash ..
DescriptionCore was generated by `/home/stskeeps/unreal/src/ircd'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libssl.so.4...done.
Loaded symbols for /lib/libssl.so.4
Reading symbols from /lib/libcrypto.so.4...done.
Loaded symbols for /lib/libcrypto.so.4
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/tls/libc.so.6...done.
Loaded symbols for /lib/tls/libc.so.6
Reading symbols from /usr/lib/libgssapi_krb5.so.2...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /lib/libcom_err.so.2...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libk5crypto.so.3...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /home/stskeeps/unreal/tmp/6AC7592C.commands.so...done.
Loaded symbols for tmp/6AC7592C.commands.so
Reading symbols from /home/stskeeps/unreal/tmp/A852984.cloak.so...done.
Loaded symbols for tmp/A852984.cloak.so
Reading symbols from /home/stskeeps/unreal/tmp/B26A1C37.m_dnsbl.so...done.
Loaded symbols for tmp/B26A1C37.m_dnsbl.so
#0 sendto_common_channels (user=0x8e96d58, pattern=0x80a0a4a ":%s QUIT :%s") at send.c:1143
1143 if (!MyConnect(cptr) || (cptr->slot < 0) || (sentalong[cptr->slot] == sentalong_marker))
(gdb) bt
#0 sendto_common_channels (user=0x8e96d58, pattern=0x80a0a4a ":%s QUIT :%s") at send.c:1143
#1 0x08079387 in exit_one_client (cptr=0x8e96d58, sptr=0x8e96d58, from=0x8e96d58,
    comment=0x16b8e0 "Quit: ^^doktor_baran", split=0) at s_misc.c:775
#2 0x0807976b in exit_client (cptr=0x8e96d58, sptr=0x8e96d58, from=0x8e96d58, comment=0x16b8e0 "Quit: ^^doktor_baran")
    at s_misc.c:685
#3 0x0012eb32 in m_quit (cptr=0x8e96d58, sptr=0x8e96d58, parc=2, parv=0x8116500) at m_quit.c:174
#4 0x080653b9 in parse (cptr=0x8e96d58, buffer=0x8e96e3c "QUIT", bufend=0x8e96e42 "") at parse.c:440
#5 0x08064482 in dopacket (cptr=0x8e96d58, buffer=0x80a94c0 "QUIT :\n", length=0) at packet.c:138
#6 0x08057e62 in read_message (delay=1, listp=0x81448a0) at s_bsd.c:1504
#7 0x08060903 in main (argc=1, argv=0xbfec8254) at ircd.c:1577
3rd party modules

Activities

syzop

2007-02-28 13:02

administrator   ~0013247

p *cptr
?

Also - possibly offtopic, but dunnow - I should note that I don't trust m_dnsbl at all.. whenever you would rehash there's a (realistic) chance of bad stuff going to happen (like a couple of seconds later). I forgot if he had finally fixed that -- can't be bothered to check anyway ;).

syzop

2007-03-01 19:16

administrator   ~0013251

hm why would it crash then...
MyConnect() is simply
#define MyConnect(x) ((x)->fd != -256)
so couldnt crash

and cptr->slot < 0 is true, so should stop evaluating there...
should have continued the loop then (nextline), but not crash on the 'if'....

Issue History

Date Modified Username Field Change
2007-02-28 12:01 stskeeps New Issue
2007-02-28 13:02 syzop Note Added: 0013247
2007-03-01 19:16 syzop Note Added: 0013251
2007-04-27 03:11 stskeeps Status new => closed
2007-04-27 03:11 stskeeps Resolution open => unable to duplicate