hi list!
today we built from master and we ran into this:
Ready to process requests.
rad_recv: Access-Request packet from host 172.20.23.31 port 1814,
id=193, length=228
NAS-Port-Type = Wireless-802.16
Proxy-State = 0x323231
WiMAX-Available-In-Client = 99
Service-Type = Framed-User
WiMAX-BS-ID = 0x303030303230303630313030
WiMAX-Release = "1.1"
Message-Authenticator = 0x6149f02200f787d01064d0305effb1ce
WiMAX-Accounting-Capabilities = Flow-Based
NAS-IP-Address = 172.20.10.121
WiMAX-Hotlining-Capabilities = Hotline-Profile-Id
Calling-Station-Id = "0B4E398C5FF7"
User-Name = "test@fr3"
Event-Timestamp = "May 30 2013 15:42:48 CEST"
NAS-Identifier = "A_NAS"
WiMAX-GMT-Timezone-offset = 16777216
EAP-Message = 0x022a000d017465737440667233
Attr-26 = 0x000060b5010301
WiMAX-Idle-Mode-Notification-Cap = Supported
(3) # Executing section authorize from file /etc/raddb/sites-enabled/default
(3) group authorize {
(3) - entering group authorize {...}
(3) eap : EAP packet type response id 42 length 13
(3) eap : EAP-Identity reply, returning 'ok' so we can short-circuit the
rest of authorize
(3) [eap] = ok
Breakpoint 1, hints_setup (hints=0x9f9790, request=0xaf9870) at
src/modules/rlm_preprocess/rlm_preprocess.c:381
381 {
Missing separate debuginfos, use: debuginfo-install
freeradius-3.0.0-13.el6.x86_64
(gdb) f
#0 hints_setup (hints=0x9f9790, request=0xaf9870) at
src/modules/rlm_preprocess/rlm_preprocess.c:381
381 {
(gdb) info args
hints = 0x9f9790
request = 0xaf9870
(gdb) info frame
Stack level 0, frame at 0x7fffffffc910:
rip = 0x7fffe7b222a0 in hints_setup
(src/modules/rlm_preprocess/rlm_preprocess.c:381); saved rip 0x7fffe7b227eb
called by frame at 0x7fffffffcd30
source language c.
Arglist at 0x7fffffffc900, args: hints=0x9f9790, request=0xaf9870
Locals at 0x7fffffffc900, Previous frame's sp is 0x7fffffffc910
Saved registers:
rip at 0x7fffffffc908
(gdb) n
389 request_pairs = request->packet->vps;
(gdb) n
391 if (!hints || !request_pairs)
(gdb) n
389 request_pairs = request->packet->vps;
(gdb) n
391 if (!hints || !request_pairs)
(gdb) n
397 name = (tmp = pairfind(request_pairs, PW_USER_NAME, 0,
TAG_ANY)) ?
(gdb) n
399 if (!name || name[0] == 0) {
(gdb) n
421 pairdelete(&add, PW_STRIP_USER_NAME, 0,
TAG_ANY);
(gdb) n
410 if (((strcmp(i->name, "DEFAULT") == 0) ||
(strcmp(i->name, name) == 0)) &&
(gdb) n
411 (paircompare(request, request_pairs,
i->check, NULL) == 0)) {
(gdb) n
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff75d4a56 in paircompare (request=0xaf9870, req_list=0xaf9ce0,
check=0x9f8fe0, rep_list=0x0) at src/main/valuepair.c:495
495 if (!check_item->da->vendor) switch
(check_item->da->attr) {
(gdb) info args
request = 0xaf9870
req_list = 0xaf9ce0
check = 0x9f8fe0
rep_list = 0x0
(gdb) info frame
Stack level 0, frame at 0x7fffffffc8b0:
rip = 0x7ffff75d4a56 in paircompare (src/main/valuepair.c:495); saved
rip 0x7fffe7b223bb
called by frame at 0x7fffffffc910
source language c.
Arglist at 0x7fffffffc808, args: request=0xaf9870, req_list=0xaf9ce0,
check=0x9f8fe0, rep_list=0x0
Locals at 0x7fffffffc808, Previous frame's sp is 0x7fffffffc8b0
Saved registers:
rbx at 0x7fffffffc878, rbp at 0x7fffffffc880, r12 at 0x7fffffffc888,
r13 at 0x7fffffffc890, r14 at 0x7fffffffc898, r15 at 0x7fffffffc8a0, rip
at 0x7fffffffc8a8
(gdb) print check_item->da
$1 = (const DICT_ATTR *) 0x1000003ec
(gdb) print check_item->da->vendor
Cannot access memory at address 0x1000003f4
(gdb) print check_item->da->attr
Cannot access memory at address 0x1000003ec
it looks like a bug in src/modules/rlm_preprocess/rlm_preprocess.c but
we're not so sure about the resolution; has anyone encountered/solved
the same issue?
thanks+regards,
duffy
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
