Package: libsqlite3-0 Version: 3.7.13-1+deb7u1 Severity: serious Originally detected I believe on sid installation, but forgot to capture the version, I will try to replicate/report later. But very consistent with wheezy (from which I am reporting now).
Triggered by the backport fail2ban 0.9.1-1~nd70+1 (available from http://neuro.debian.net/debian-devel/ wheezy/main amd64 Packages apt repo) it gets to #0 sqlite3_value_type (pVal=0x0) at sqlite3.c:63805 #1 0x00007ffff570ee2e in sqlite3_column_type (pStmt=0x114eec8, i=<optimized out>) at sqlite3.c:64447 #2 0x00007ffff599b3d4 in _pysqlite_fetch_one_row (self=0x11e3540) at /home/jmm/py/python2.7-2.7.3/Modules/_sqlite/cursor.c:363 #3 0x00007ffff599d71d in pysqlite_cursor_iternext (self=0x11e3540) at /home/jmm/py/python2.7-2.7.3/Modules/_sqlite/cursor.c:939 #4 0x000000000046d967 in listextend (self=0x107cb28, b=<sqlite3.Cursor at remote 0x11e3540>) at ../Objects/listobject.c:872 #5 0x0000000000471932 in list_init (self=0x107cb28, args=(<sqlite3.Cursor at remote 0x11e3540>,), kw=0x0) at ../Objects/listobject.c:2458 #6 0x00000000004b2092 in type_call (type=0x86dde0, args=(<sqlite3.Cursor at remote 0x11e3540>,), kwds=0x0) at ../Objects/typeobject.c:737 #7 0x00000000004291af in PyObject_Call (func=<type at remote 0x86dde0>, arg=(<sqlite3.Cursor at remote 0x11e3540>,), kw=0x0) at ../Objects/abstract.c:2529 #8 0x000000000052977e in do_call (func=<type at remote 0x86dde0>, pp_stack=0x7ffff52a0490, na=1, nk=0) at ../Python/ceval.c:4239 #9 0x0000000000528b3b in call_function (pp_stack=0x7ffff52a0490, oparg=1) at ../Python/ceval.c:4044 #10 0x0000000000523733 in PyEval_EvalFrameEx (f= Frame 0x10f0ba0, for file /usr/lib/python2.7/dist-packages/fail2ban/server/database.py, line 467, in getBansMerged (self=<Fail2BanDb(_dbFilename='/var/lib/fail2ban/fail2ban.sqlite3', _db=<sqlite3.Connection at remote 0x11178c0>, _lock=<thread.lock at remote 0xf2ad10>, _purgeAge=86400, _bansMergedCache={('113.12.202.186', <Jail(_Jail__actions=<Actions(active=True, _Thread__ident=140737306576640, run=<function at remote 0x1056840>, _jail=<...>, _Thread__block=<_Condition(_Verbose__verbose=False, _Condition__lock=<thread.lock at remote 0x106f0e0>, acquire=<built-in method acquire of thread.lock object at remote 0x106f0e0>, _Condition__waiters=[], release=<built-in method release of thread.lock object at remote 0x106f0e0>) at remote 0x1070290>, _Thread__name='Thread-5', _Thread__daemonic=False, _actions=<OrderedDict(_OrderedDict__root=[[[...], [...], 'iptables-multiport'], [...], None], _OrderedDict__map={'iptables-multiport': [...]}) at remote 0x11181c0>, sleeptime=1, _Thread__start ed=<_Event(_Verbose__verbose=F...(truncated), throwflag=0) at ../Python/ceval.c:2666 #11 0x0000000000526121 in PyEval_EvalCodeEx (co=0xf18670, globals= {'locale': <module at remote 0xe4f7b0>, 'commitandrollback': <function at remote 0xf2bc30>, 'MyTime': <classobj at remote 0xd51520>, 'Fail2BanDb': <type at remote 0xf3a820>, 'shutil': <module at remote 0xf1be98>, 'wraps': <function at remote 0xcc1258>, '__package__': 'fail2ban.server', 'json': <module at remote 0xeb6f00>, 'sqlite3': <module at remote 0xf1b3a0>, 'FailTicket': <classobj at remote 0xd51228>, '__doc__': None, '__license__': 'GPL', '__builtins__': {'bytearray': <type at remote 0x85fd20>, 'IndexError': <type at remote 0x866360>, 'all': <built-in function all>, 'help': <_Helper at remote 0xb25fb0>, 'vars': <built-in function vars>, 'SyntaxError': <type at remote 0x865ce0>, 'unicode': <type at remote 0x87d040>, 'UnicodeDecodeError': <type at remote 0x866c80>, 'memoryview': <type at remote 0x870c00>, 'isinstance': <built-in function isinstance>, 'copyright': <_Printer(_Printer__data='Copyright (c) 2001-2012 Python Software Foundation.\nAll Rights Reserved.\n\nCopyright (c ) 2000 BeOpen.com.\nAll Rights...(truncated), locals=0x0, args=0x11556b8, argcount=1, kws= 0x11556c0, kwcount=2, defs=0xf28c08, defcount=3, closure=0x0) at ../Python/ceval.c:3253 #12 0x0000000000528f36 in fast_function (func=<function at remote 0xf58450>, pp_stack=0x7ffff52a0950, n=5, na=1, nk=2) at ../Python/ceval.c:4117 #13 0x0000000000528b1f in call_function (pp_stack=0x7ffff52a0950, oparg=512) at ../Python/ceval.c:4042 #14 0x0000000000523733 in PyEval_EvalFrameEx (f= Frame 0x1155520, for file /usr/lib/python2.7/dist-packages/fail2ban/server/actions.py, line 274, in <lambda> (jail=<Jail(_Jail__actions=<Actions(active=True, _Thread__ident=140737306576640, run=<function at remote 0x1056840>, _jail=<...>, _Thread__block=<_Condition(_Verbose__verbose=False, _Condition__lock=<thread.lock at remote 0x106f0e0>, acquire=<built-in method acquire of thread.lock object at remote 0x106f0e0>, _Condition__waiters=[], release=<built-in method release of thread.lock object at remote 0x106f0e0>) at remote 0x1070290>, _Thread__name='Thread-5', _Thread__daemonic=False, _actions=<OrderedDict(_OrderedDict__root=[[[...], [...], 'iptables-multiport'], [...], None], _OrderedDict__map={'iptables-multiport': [...]}) at remote 0x11181c0>, sleeptime=1, _Thread__started=<_Event(_Verbose__verbose=False, _Event__flag=True, _Event__cond=<_Condition(_Verbose__verbose=False, _Condition__lock=<thread.lock at remote 0x106f090>, acquire=<built-in method acquire of thread.lock obj ect at remote 0x106f090>, _Con...(truncated), throwflag=0) at ../Python/ceval.c:2666 ... here is py-bt stack (ran with python-dbg): #10 Frame 0x10f0ba0, for file /usr/lib/python2.7/dist-packages/fail2ban/server/database.py, line 467, in getBansMerged (self=<Fail2BanDb(_dbFilename='/var/lib/fail2ban/fail2ban.sqlite3', _db=<sqlite3.Connection at remote 0x11178c0>, _lock=<thread.lock at remote 0xf2ad10>, _purgeAge=86400, _bansMergedCache={('113.12.202.186', <Jail(_Jail__actions=<Actions(active=True, _Thread__ident=140737306576640, run=<function at remote 0x1056840>, _jail=<...>, _Thread__block=<_Condition(_Verbose__verbose=False, _Condition__lock=<thread.lock at remote 0x106f0e0>, acquire=<built-in method acquire of thread.lock object at remote 0x106f0e0>, _Condition__waiters=[], release=<built-in method release of thread.lock object at remote 0x106f0e0>) at remote 0x1070290>, _Thread__name='Thread-5', _Thread__daemonic=False, _actions=<OrderedDict(_OrderedDict__root=[[[...], [...], 'iptables-multiport'], [...], None], _OrderedDict__map={'iptables-multiport': [...]}) at remote 0x11181c0>, sleeptime=1, _Thread__start ed=<_Event(_Verbose__verbose=F...(truncated) results = list(self._getBans(ip=ip, jail=jail, bantime=bantime)) #14 Frame 0x1155520, for file /usr/lib/python2.7/dist-packages/fail2ban/server/actions.py, line 274, in <lambda> (jail=<Jail(_Jail__actions=<Actions(active=True, _Thread__ident=140737306576640, run=<function at remote 0x1056840>, _jail=<...>, _Thread__block=<_Condition(_Verbose__verbose=False, _Condition__lock=<thread.lock at remote 0x106f0e0>, acquire=<built-in method acquire of thread.lock object at remote 0x106f0e0>, _Condition__waiters=[], release=<built-in method release of thread.lock object at remote 0x106f0e0>) at remote 0x1070290>, _Thread__name='Thread-5', _Thread__daemonic=False, _actions=<OrderedDict(_OrderedDict__root=[[[...], [...], 'iptables-multiport'], [...], None], _OrderedDict__map={'iptables-multiport': [...]}) at remote 0x11181c0>, sleeptime=1, _Thread__started=<_Event(_Verbose__verbose=False, _Event__flag=True, _Event__cond=<_Condition(_Verbose__verbose=False, _Condition__lock=<thread.lock at remote 0x106f090>, acquire=<built-in method acquire of thread.lock obj ect at remote 0x106f090>, _Con...(truncated) jail.database.getBansMerged(ip=ip, jail=jail).getAttempt() #18 Frame 0x1153f50, for file /usr/lib/python2.7/dist-packages/fail2ban/server/action.py, line 78, in __getitem__ (self=<CallingMap(data={'ipjailmatches': <function at remote 0x1056a38>, 'matches': u'Nov 27 17:49:58 head1 sshd[30299]: Failed password for root from 111.74.239.35 port 4965 ssh2\nNov 27 17:50:00 head1 sshd[30299]: Failed password for root from 111.74.239.35 port 4965 ssh2\nNov 27 17:50:03 head1 sshd[30299]: Failed password for root from 111.74.239.35 port 4965 ssh2\nNov 27 17:50:05 head1 sshd[30299]: Failed password for root from 111.74.239.35 port 4965 ssh2\nNov 27 17:50:08 head1 sshd[30299]: Failed password for root from 111.74.239.35 port 4965 ssh2', 'ip': '111.74.239.35', 'ipmatches': <function at remote 0x1056798>, 'ipfailures': '105', 'time': '1417128608.39', 'failures': '5', 'ipjailfailures': <function at remote 0x1056990>}) at remote 0x1061140>, key='ipjailfailures', value=<function at remote 0x1056990>) return value() #27 Frame 0x10ef4f0, for file /usr/lib/python2.7/dist-packages/fail2ban/server/action.py, line 386, in substituteRecursiveTags (cls=<ABCMeta(__module__='fail2ban.server.action', actionunban=<property at remote 0xe0da78>, _abc_negative_cache=<WeakSet(_remove=<function at remote 0xe103a8>, _pending_removals=[], _iterating=set([]), data=set([])) at remote 0xe02bc0>, _abc_registry=<WeakSet(_remove=<function at remote 0xe0f258>, _pending_removals=[], _iterating=set([]), data=set([])) at remote 0xe02a00>, stop=<function at remote 0xe0fed0>, _escapedTags=set(['matches', 'ipjailmatches', 'ipmatches']), escapeTag=<staticmethod at remote 0xddad60>, __subclasshook__=<classmethod at remote 0xdda470>, executeCmd=<staticmethod at remote 0xe07198>, actionstop=<property at remote 0xe0db88>, actionstart=<property at remote 0xe0d968>, __init__=<function at remote 0xe0f300>, _abc_cache=<WeakSet(_remove=<function at remote 0xe10300>, _pending_removals=[], _iterating=set([]), data=set([])) at remote 0xe0 2ae0>, replaceTag=<classmethod...(truncated) value = str(tags[tag]) (gdb) py-print ip local 'ip' = '111.74.239.35' (gdb) py-print bantime local 'bantime' = None (gdb) py-down Unable to find a newer python frame (gdb) py-print jail unfortunately we haven't logged the sql queries so not sure on exact one, but I think it was this one, which if executed from the shell seems to not cause the segfault... n {1..100}; do sqlite3 -list fail2ban.sqlite3 'SELECT ip, timeofban, data FROM bans WHERE 1 AND jail="sshd" AND ip="111.74.239.35" ORDER BY ip, timeofban' >/dev/null && echo success; done Please help me to troubleshoot this one if more information is necessary to point the issue -- System Information: Debian Release: 7.7 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages libsqlite3-0 depends on: ii libc6 2.13-38+deb7u6 ii multiarch-support 2.13-38+deb7u6 libsqlite3-0 recommends no packages. libsqlite3-0 suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org