Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Mar 2003 14:25:50 +0300
From:      Sergey Homenkow <hsw@yandex.ru>
To:        freebsd-questions@freebsd.org
Subject:   ppp get segfault
Message-ID:  <1063200734.20030317142550@yandex.ru>

next in thread | raw e-mail | index | archive | help
Hello!

I setup pppoed on vlan interface in my box.
(FreeBSD sofia.nirvana.ipct.ru 4.8-PRERELEASE FreeBSD 4.8-PRERELEASE #7: Fri Feb 28 15:33:11 MSK 2003     root@sofia.nirvana.ipct.ru:/usr/src/sys/compile/SOFIA  i386)

I use ppp with libradius and chap auth.

When length of username is greated then 8 i often get ppp.core.
When i cut username in radius database to 8 characters - all work
fine.

I compile ppp and libc with DEBUG_FLAGS=-ggdb and -DEXTRA_SANITY.

gdb said:

================
GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read called at /usr/src/gnu/usr.
bin/binutils/gdb/../../../../contrib/gdb/gdb/dwarf2read.c line 3049 in dwarf2_read_section

Core was generated by `ppp_mac'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libcrypt.so.2...done.
Reading symbols from /usr/lib/libmd.so.2...done.
Reading symbols from /usr/lib/libutil.so.3...done.
Reading symbols from /usr/lib/libz.so.2...done.
Reading symbols from /usr/lib/libalias.so.4...done.
Reading symbols from /usr/lib/libcrypto.so.3...done.
Reading symbols from /usr/lib/libradius.so.1...done.
Reading symbols from /usr/lib/libnetgraph.so.1...done.
Reading symbols from /usr/lib/libc.so.4...done.
Reading symbols from /usr/libexec/ld-elf.so.1...done.
#0  malloc_pages (size=28672) at /usr/src/lib/libc/../libc/stdlib/malloc.c:508
508             if (pf->size & malloc_pagemask)
(gdb) where
#0  malloc_pages (size=28672) at /usr/src/lib/libc/../libc/stdlib/malloc.c:508
#1  0x28286c39 in imalloc (size=26824) at /usr/src/lib/libc/../libc/stdlib/malloc.c:717
#2  0x28287365 in malloc (size=26824) at /usr/src/lib/libc/../libc/stdlib/malloc.c:1076
#3  0x80782dc in route_UpdateMTU (bundle=0x80a9840) at route.c:495
#4  0x804fddb in bundle_CalculateBandwidth (bundle=0x80a9840) at bundle.c:1926
#5  0x804ccb8 in bundle_LinksRemoved (bundle=0x80a9840) at bundle.c:253
#6  0x804ce89 in bundle_LayerDown (v=0x80a9840, fp=0x80c8114) at bundle.c:333
#7  0x805c517 in datalink_LayerDown (v=0x80c5000, fp=0x80c8114) at datalink.c:759
#8  0x8061725 in FsmRecvTermReq (fp=0x80c8114, lhp=0xbfbff1bc, bp=0x27) at fsm.c:766
#9  0x806208b in fsm_Input (fp=0x80c8114, bp=0x80cc000) at fsm.c:1090
#10 0x806c3e9 in lcp_Input (bundle=0x80a9840, l=0x80c8114, bp=0x80cc000) at lcp.c:1290
#11 0x806c99b in Despatch (bundle=0x282be000, l=0x80c8000, bp=0x80cc000, proto=49185)
    at link.c:350
#12 0x806c8bd in link_PullPacket (l=0x80c8000, buf=0x27 <Address 0x27 out of bounds>, len=18,
    b=0x80a9840) at link.c:292
#13 0x8074d73 in physical_DescriptorRead (d=0x282be000, bundle=0x80a9840, fdset=0x80c1000)
    at physical.c:586
#14 0x805bb4b in datalink_Read (d=0x27, bundle=0x80a9840, fdset=0x80c1000) at datalink.c:471
#15 0x804d430 in bundle_DescriptorRead (d=0x80a9840, bundle=0x80a9840, fdset=0x80c1000)
    at bundle.c:544
#16 0x806f277 in DoLoop (bundle=0x80a9840) at main.c:654
#17 0x806ee61 in main (argc=3, argv=0xbfbffd94) at main.c:528
================

In all my cores i get segfault in malloc.c, malloc_pages().

To get segfault i send ping from client with size 1000 or 2000.

All other system parts (eg kernel, samba, squid) work fine.

-- 
Best regards,
 Sergey                          mailto:hsw@yandex.ru


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1063200734.20030317142550>