OpenCSW Bug Tracker


Viewing Issue Simple Details Jump to Notes ] View Advanced ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0001205 [netsnmp] regular use crash always 2005-10-05 08:05 2009-12-25 21:08
Reporter PaulBoven View Status public  
Assigned To hson
Priority normal Resolution fixed  
Status closed  
Summary 0001205: snmpd crashes
Description To reproduce:
1. Create a minimal snmpd.conf in /opt/csw/etc/snmp/snmpd.conf, containing e.g.
--
rocommunity public localhost
master yes
syslocaltion Somewhere
sysservices 76
--
/opt/csw/sbin/snmpd
/opt/csw/bin/snmpwalk -c public localhost
<lots of MIB output>, but incomplete, then stops and snmpwalk reports a timeout.

snmpd crashes with a SIGSEGV somewhere during the snmpwalk
and is gone.
Additional Information Stack backtrace:

 ff3a0614 memcpy (0, ffbfeba0, 74, 2, 7800, ffbfec14) + 134
 ff281694 var_ipRouteEntry (ffbfef64, c02d0, c02c0, 0, ffbfeba2, fffffffe) + 1fc ff33c6f0 netsnmp_old_api_helper (1, 4c5f0, f0a10, e8068, 8, ffbfef64) + 10c
 ff376aa0 netsnmp_call_handler (c00, 4c5f0, f0a10, e8068, 4b1d0, ff38ebf4) + 150 ff376aa0 netsnmp_call_handler (c00, 4c5f0, f0a10, e8068, 4b1f0, ff38ebf4) + 150 ff36c764 handle_var_requests (0, bff28, f0a10, 0, 0, 40) + 50
 ff36d5a4 handle_getnext_loop (bff28, 400, 1ec48, 0, ff38bfd0, ff379588) + 228
 ff36dbc8 netsnmp_handle_request (bff28, 0, 1e5fc, ff3714e4, ff38bfd0, 0) + 1fc
 ff36b4b8 handle_snmp_packet (1, bff78, 20c54, bfe90, bff28, 1) + 15c
 ff15181c ???????? (f5720, bff78, d0420, d2f00, f5768, bfe90)
 ff1529bc _sess_read (f5720, ffbff6dc, 10000, f8b68, 0, 0) + fb0
 ff152bfc snmp_sess_read (f5720, ffbff6dc, 1, 66200, 0, 40) + 20
 ff1519dc snmp_read (ffbff6dc, 88e8, 67438, ffffffff, ff1b8de8, 8800) + 38
 00013bf8 ???????? (ffbff770, ffbff768, 0, f4240, 0, 26918)
 00013328 main (2, 3, 15000, 11c00, 26930, 15000) + 1208
 00011bd8 _start (0, 0, 0, 0, 0, 0) + 108

Tested on Solaris 9 Sunblade 1000.
Tags No tags attached.
Attached Files

- Relationships

-  Notes
(0002780)
charlie (reporter)
2005-12-29 04:21

Same here on Solaris 10:

SunOS tomcat01 5.10 Generic_118822-11 sun4u sparc SUNW,UltraSPARC-IIi-cEngine

root@tomcat01:~# pkginfo -l CSWnetsnmp
   PKGINST: CSWnetsnmp
      NAME: netsnmp - lib and tools for SNMP usage
  CATEGORY: system
      ARCH: sparc
   VERSION: 5.1
    VENDOR: http://net-snmp.sourceforge.net/ [^] packaged for CSW by Philip Brown
    PSTAMP: apollo20040117154556
  INSTDATE: Nov 03 2005 16:13
   HOTLINE: http://www.blastwave.org/bugtrack/ [^]
     EMAIL: phil@bolthole.com
    STATUS: completely installed
     FILES: 395 installed pathnames
                  10 shared pathnames
                  21 directories
                  37 executables
               15064 blocks used (approx)

root@tomcat01:~#

dies after snmpwalkling it at:

IP-MIB::ipAdEntBcastAddr.127.0.0.1 = INTEGER: 0
IP-MIB::ipAdEntBcastAddr.172.27.0.101 = INTEGER: 1
IP-MIB::ipAdEntBcastAddr.193.154.180.106 = INTEGER: 1

truss shows following:

brk(0x0011E918) = 0
brk(0x00124918) = 0
putmsg(14, 0xFFBF4A14, 0x00000000, 0) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2
getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0
ioctl(14, I_FLUSH, FLUSHRW) = 0
    Incurred fault 0000006, FLTBOUNDS %pc = 0xFEC2DC40
      siginfo: SIGSEGV SEGV_MAPERR addr=0x00126000
    Received signal 0000011, SIGSEGV [default]
      siginfo: SIGSEGV SEGV_MAPERR addr=0x00126000
root@tomcat01:/opt/csw#


HTH
(0002796)
phil (reporter)
2006-01-02 16:42

Dont really know what to do here.. I just package it :-/

Suggestions requested.
(0007136)
hson (developer)
2009-12-25 21:08

Fixed in 5.4.2.1,REV=2009.12.24


Copyright © 2000 - 2008 Mantis Group
Powered by Mantis Bugtracker