Hi!

I have reproduced the problem.  I have a (refined) trackback with more
information:

  (gdb) bt full
  #0  __strlen_sse2 () at ../sysdeps/x86_64/multiarch/../strlen.S:32
  No locals.
  #1  0x00002aaaab885357 in xdr_string (xdrs=xdrs@entry=0x7fffffffcf90, 
      cpp=cpp@entry=0x7fffffffd0f8, maxsize=maxsize@entry=4294967295) at 
xdr.c:680
          sp = 0x1c52ab7fd960 <Address 0x1c52ab7fd960 out of bounds>
          size = <optimized out>
          nodesize = <optimized out>
          __func__ = "xdr_string"
  #2  0x00002aaaab159061 in xdr_gf1_cli_create_vol_rsp 
(xdrs=xdrs@entry=0x7fffffffcf90, 
      objp=objp@entry=0x7fffffffd0f0) at cli1-xdr.c:279
  No locals.
  #3  0x00002aaaaaf44f11 in xdr_serialize_generic (outmsg=..., 
res=0x7fffffffd0f0, 
      proc=0x2aaaab159010 <xdr_gf1_cli_create_vol_rsp>) at rpc-common.c:36
          ret = -1
          xdr = {x_op = XDR_ENCODE, x_ops = 0x2aaaabb01860, x_public = 0x0, 
            x_private = 0x2aaaac2cc008 "", x_base = 0x2aaaac2cc000 
"\377\377\321@", 
            x_handy = 131064}
          __FUNCTION__ = "xdr_serialize_generic"
  #4  0x00002aaaacb6b906 in glusterd_serialize_reply 
(req=req@entry=0x2aaaacdac024, 
      arg=0x7fffffffd0f0, sfunc=0x2aaaab15a250 
<gf_xdr_serialize_cli_create_vol_rsp>, 
      outmsg=outmsg@entry=0x7fffffffd020) at glusterd-utils.c:402
          iob = 0x555555783760
          retlen = -1
          __FUNCTION__ = "glusterd_serialize_reply"

I suspect, that objp->volname (at cli1-xdr.c:279) contains uninitialized memory,
and when xdr_string tries to perform a strlen on that, it breaks, down.

Cheers,
Paul

-- 
| mozcode.                             | e-mail: p...@mozcode.nl
| (open source) software               | web: http://www.mozcode.nl
| ontwikkeling & consultancy           | jabber/gtalk: p...@luon.net



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to