Control: reassign -1 libtirpc1
Control: found -1 0.2.4-1

On Fri, Aug 01, 2014 at 11:41:12PM +0200, Євгеній Мещеряков wrote:
> rpc.gssd started crashing again when mounting an encrypted nfs4
> filesystem.

> The dmesg contains:

>   [  391.284130] rpc.gssd[1756]: segfault at b5a ip 00007f70bb3d772f sp 
> 00007fff5765a080 error 4 in libgssapi_krb5.so.2.2[7f70bb3c4000+45000]
>   [  391.284935] NFS: nfs4_discover_server_trunking unhandled error -32. 
> Exiting with error EIO

This is a regression in libtirpc, which is no longer linked against gssglue
like it's supposed to be.

$ debdiff ftp/pool/main/libt/libtirpc/libtirpc1_0.2.{3-2,4-1}_i386.deb 
File lists identical (after any substitutions)

Control files: lines which differ (wdiff format)
------------------------------------------------
Depends: libc6 (>= 2.16), [-libgssglue1-] {+libcomerr2 (>= 1.01), 
libgssapi-krb5-2 (>= 1.10+dfsg~), libk5crypto3 (>= 1.6.dfsg.2), libkrb5-3 (>= 
1.6.dfsg.2)+}
Installed-Size: [-203-] {+251+}
Maintainer: [-Debian QA Group <packa...@qa.debian.org>-] {+Anibal Monsalve 
Salazar <ani...@debian.org>+}
Version: [-0.2.3-2-] {+0.2.4-1+}
$

Aníbal, I see that you have applied a patch in your most recent upload in
order to get the package to build against gssglue.  This patch appears to be
incomplete, because regardless of the headers used at compile time, libtirpc
is clearly linking against MIT KRB5 directly.  This is a bug; libtirpc and
nfs-utils need to be linking against the same provider of GSS, or segfaults
ensue.  If there is a reason for switching the linkage away from gssglue,
then a coordinated transition would be needed.

libtirpc has two reverse dependencies in the archive, rpcbind and nfs-utils.
I would appreciate it if you would test both of them when making changes to
libtirpc.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slanga...@ubuntu.com                                     vor...@debian.org

Attachment: signature.asc
Description: Digital signature

Reply via email to