URL:
<http://savannah.cern.ch/bugs/?99074>
Summary: Xrdsecgsi crash in sl5 3.3.0rc1
Project: XROOTD
Submitted by: dhsmith
Submitted on: 2012-11-26 10:37
Severity: 3 - Normal
Priority: 5 - Normal
Status: None
Privacy: Public
Assigned to: None
Originator Email:
Open/Closed: Open
Discussion Lock: Any
Fixed by commit(s):
_______________________________________________________
Details:
We had a report in production of a crash shortly after the log entry:
121126 10:23:54 363 secgsi_GetCA: entry for '1d879c6c.0:1' needs refreshing:
clean the related entry cache first
but no crash dump was available on that occasion. However this was with 3.2.1
and I know there were recently changes around the crl refreshing.
Testing 3.3.0rc1 with a deliberately fast crlrefresh period I can provoke a
crash (in this test it was after about 5 refreshes, ~1 minute)
Snippet of the configuration for gsi config:
sec.protocol /usr/$(xrdlibdir) gsi -crl:1
-key:/etc/grid-security/dpmmgr/dpmkey.pem
-cert:/etc/grid-security/dpmmgr/dpmcert.pem -md:sha256:sha1 -ca:2 -gmapopt:10
-vomsat:0 -crlrefresh:10
And trace:
#0 Cert (this=0x2aaab403b7f0, checkselfsigned=true)
at /usr/src/debug/xrootd/xrootd/src/XrdCrypto/XrdCryptoX509Chain.hh:73
#1 XrdCryptoX509Chain::CheckCA (this=0x2aaab403b7f0, checkselfsigned=true)
at /usr/src/debug/xrootd/xrootd/src/XrdCrypto/XrdCryptoX509Chain.cc:190
#2 0x00002aaaab275abd in XrdCryptoX509Chain::CAname (this=0x14628aa0)
at /usr/src/debug/xrootd/xrootd/src/XrdCrypto/XrdCryptoX509Chain.cc:793
#3 0x00002aaaab276a5b in XrdCryptoX509Chain::XrdCryptoX509Chain
(this=0x14469f40, ch=0x2aaab403b7f0)
at /usr/src/debug/xrootd/xrootd/src/XrdCrypto/XrdCryptoX509Chain.cc:108
#4 0x00002aaaaae1b242 in XrdCryptosslgsiX509Chain (this=0x2aaab016a7c0,
br=0x2aaab0162eb0, bm=0x41f39798, cmsg=
...) at
/usr/src/debug/xrootd/xrootd/src/XrdCrypto/XrdCryptosslgsiX509Chain.hh:53
#5 XrdSecProtocolgsi::ServerDoCert (this=0x2aaab016a7c0, br=0x2aaab0162eb0,
bm=0x41f39798, cmsg=...)
at /usr/src/debug/xrootd/xrootd/src/XrdSecgsi/XrdSecProtocolgsi.cc:3503
#6 0x00002aaaaae1c045 in XrdSecProtocolgsi::ParseServerInput
(this=0x14628aa0, br=0x40, bm=0x14628aa0, cmsg=...)
at /usr/src/debug/xrootd/xrootd/src/XrdSecgsi/XrdSecProtocolgsi.cc:3274
#7 0x00002aaaaae1f6c9 in XrdSecProtocolgsi::Authenticate
(this=0x2aaab016a7c0, cred=0x41f3a030,
parms=0x41f3a068, ei=0x41f397f0) at
/usr/src/debug/xrootd/xrootd/src/XrdSecgsi/XrdSecProtocolgsi.cc:1693
#8 0x0000000000423303 in XrdXrootdProtocol::do_Auth (this=0x1453c740)
at /usr/src/debug/xrootd/xrootd/src/XrdXrootd/XrdXrootdXeq.cc:147
#9 0x00002b251eafe580 in XrdLink::DoIt (this=0x1456c368) at
/usr/src/debug/xrootd/xrootd/src/Xrd/XrdLink.cc:440
#10 0x00002b251eb028d6 in XrdScheduler::Run (this=0x2b251e887b60)
at /usr/src/debug/xrootd/xrootd/src/Xrd/XrdScheduler.cc:307
#11 0x00002b251eb02a69 in XrdStartWorking (carg=0x14628aa0)
at /usr/src/debug/xrootd/xrootd/src/Xrd/XrdScheduler.cc:84
#12 0x00002b251ead07ff in XrdSysThread_Xeq (myargs=<value optimized out>)
at /usr/src/debug/xrootd/xrootd/src/XrdSys/XrdSysPthread.cc:86
#13 0x000000345d80677d in start_thread () from /lib64/libpthread.so.0
#14 0x000000345d0d3c1d in clone () from /lib64/libc.so.6
(sl5: openssl openssl-0.9.8e-22.el5_8.4.x86_64)
a crash could be similarly triggered with 3.2.5, I can't confirm for 3.2.6 or
not. (But because of bug #98997 we can't make 3.2.6 available for deployment).
_______________________________________________________
Reply to this item at:
<http://savannah.cern.ch/bugs/?99074>
_______________________________________________
Message sent via/by LCG Savannah
http://savannah.cern.ch/
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1
