Bug 269784

Summary:	www-apache/mod_auth_kerb-5.3: random crashes every now and then
Product:	Gentoo Linux	Reporter:	Alexander Dubov <oakad>
Component:	[OLD] Server	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	critical
Priority:	High
Version:	unspecified
Hardware:	AMD64
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Alexander Dubov 2009-05-14 06:14:41 UTC

The auth module will occasionally cause the apache child process to crash, interrupting the connection. The problem is probably caused by a particular hack present in the mod_auth_kerb.c:278

------------

#if defined(KRB5) && !defined(HEIMDAL)
/* Needed to work around problems with replay caches */
#include "mit-internals.h"

/* This is our replacement krb5_rc_store function */
static krb5_error_code KRB5_LIB_FUNCTION

----------

The workaround is version specific to mit kerberos v1.3 and may be responsible for the crashes I'm experiencing:

*** glibc detected *** /usr/sbin/apache2: double free or corruption (out): 0x0000
7f6028000100 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f604aaa6e0d]
/lib/libc.so.6(cfree+0x76)[0x7f604aaa8b06]
/usr/lib/libkrb5.so.3[0x7f60444d7000]
/usr/lib64/apache2/modules/mod_auth_kerb.so[0x7f604302fcb6]
/usr/lib64/apache2/modules/mod_auth_kerb.so[0x7f6043030809]
/usr/sbin/apache2(ap_run_check_user_id+0x7a)[0x4345aa]
/usr/sbin/apache2(ap_process_request_internal+0x2c4)[0x436564]
/usr/sbin/apache2(ap_process_request+0x178)[0x446b88]
/usr/sbin/apache2[0x443d80]
/usr/sbin/apache2(ap_run_process_connection+0x7a)[0x44018a]
/usr/sbin/apache2[0x44bf39]
/lib/libpthread.so.0[0x7f604af88097]
/lib/libc.so.6(clone+0x6d)[0x7f604aafbbcd]


Reproducible: Sometimes

Steps to Reproduce:
Running apache server in a production environment with mod_auth_kerb authentication enabled.

Comment 1 Sebastian Luther (few) 2009-05-14 07:53:34 UTC


*** This bug has been marked as a duplicate of bug 269791 ***