Package: cfengine2
Version: 2.1.15-1.0.1
Severity: grave
Justification: renders package unusable
Hi,
We're using cfengine2 over IPv6, and since 2.1.15-1.0.1 (which was
rebuilt against libssl 0.9.7; 2.1.15-1.0 works), we've had odd problems
with authentication. More specifically, the machine identifies itself
with the wrong IPv6 address; some nibbles are switched with 1c00:0000.
Note the following behaviour from strace of cfagent:
socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3
connect(3, {sa_family=AF_INET6, sin6_port=htons(5308), inet_pton(AF_INET6,
"2001:700:300:dc0f::1919", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28)
= 0
getsockname(3, {sa_family=AF_INET6, sin6_port=htons(32770),
inet_pton(AF_INET6, "2001:700:300:dc0f:213:d4ff:fe9c:7d3d", &sin6_addr),
sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0
At this point, getsockname() returns the correct IPv6 address. Then,
time passes, but nothing is done with fd 3, until:
getsockname(3, {sa_family=AF_INET6, sin6_port=htons(58321),
inet_pton(AF_INET6, "2001:700:300:dc0f:1c00:0:fe9c:7d3d", &sin6_addr),
sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0
Note that the middle part of the address suddenly is mangled, and this
breaks authentication, so cfengine becomes completely useless (since
authentication fails). My guess here is that something overwrites random
memory, causing corruption to something internal to glibc.
Switching kernels (2.6.8 / 2.6.12 / 2.6.13) doesn't help, and
downgrading libc6 to the version in etch doesn't either. nscd is off.
This is broken in exactly the same way on multiple machines, although a
few seem to survive... in any case, downgrading cfengine to the version
in etch (2.1.15-1) solves the problem.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-k7
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Versions of packages cfengine2 depends on:
ii debconf 1.4.58 Debian configuration management sy
ii debianutils 2.15 Miscellaneous utilities specific t
ii libc6 2.3.5-7 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-20 Berkeley v4.2 Database Libraries [
ii libssl0.9.8 0.9.8-3 SSL shared libraries
ii perl 5.8.7-6 Larry Wall's Practical Extraction
cfengine2 recommends no packages.
-- debconf-show failed
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
