linux-nfs.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: sdrb <sdrb@onet.eu>
To: linux-nfs@vger.kernel.org
Subject: Issue in nfs-utils 1.2.3
Date: Wed, 12 Jan 2011 12:31:27 +0100	[thread overview]
Message-ID: <4D2D910F.1080703@onet.eu> (raw)

Hello,


Recently I tried to upgrade nfs-utils to the newest nfs-utils 1.2.3. 
During tests I noticed that in some circumstances rpc.mountd
crashes with segmentation fault.
I'm testing it with 2.6.36 linux kernel.


Configuration of nfs-server:

   server# cat /etc/exports
   /export         *(rw)
   /tmp/nfs        *(rw)


The scenario how to reproduce the issue:

   server# rpc.mountd -F -d all
   server# showmount -a 127.0.0.1
   host# umount /mnt/nfs2 ; mount -t nfs server:/tmp/nfs /mnt/nfs2 -o 
nfsvers=3,nolock
   server# showmount -a 127.0.0.1


and after spawning showmount for the second time I got two segmentation 
faults: at showmount and at rpc.mountd.

Here is output from rpc.mountd:
   rpc.mountd: Received DUMP request from 127.0.0.1
   rpc.mountd: Received NULL request from host
   rpc.mountd: Received UMNT(/tmp/nfs) request from host
   rpc.mountd: authenticated unmount request from host:844 for /tmp/nfs 
(/tmp/nfs)
   rpc.mountd: Received NULL request from host
   rpc.mountd: Received NULL request from host
   rpc.mountd: Received MNT3(/tmp/nfs) request from host
   rpc.mountd: authenticated mount request from host:729 for /tmp/nfs 
(/tmp/nfs)
   rpc.mountd: nfsd_fh: inbuf '* 7 
\x0ab4100000000000dd2efb04e753f0980000000000000000'
   rpc.mountd: nfsd_fh: found 0x1f13380 path /tmp/nfs
   rpc.mountd: Received DUMP request from 127.0.0.1
   Segmentation fault
.


To gather more info I run rpc.mountd in gdb:


Starting program: /usr/sbin/rpc.mountd -F

   Program received signal SIGSEGV, Segmentation fault.
   0x00007ffff7b6f7a2 in xdr_string_internal () from /lib64/libc.so.6

   #0  0x00007ffff7b6f7a2 in xdr_string_internal () from /lib64/libc.so.6
   #1  0x0000000000409eee in xdr_name (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:83
   #2  0x0000000000409ff9 in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b530) at mount_xdr.c:103
   #3  0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   #4  0x00007ffff7b70de1 in xdr_pointer () from /lib64/libc.so.6
   #5  0x0000000000409ed3 in xdr_mountlist (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:93
   #6  0x000000000040a02c in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b590) at mount_xdr.c:107
   #7  0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   #8  0x00007ffff7b70de1 in xdr_pointer () from /lib64/libc.so.6
   #9  0x0000000000409ed3 in xdr_mountlist (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:93
   #10 0x000000000040a02c in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b470) at mount_xdr.c:107
   #11 0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   #12 0x00007ffff7b70de1 in xdr_pointer () from /lib64/libc.so.6
   #13 0x0000000000409ed3 in xdr_mountlist (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:93
   #14 0x000000000040a02c in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b4d0) at mount_xdr.c:107
   #15 0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   #16 0x00007ffff7b70de1 in xdr_pointer () from /lib64/libc.so.6
   #17 0x0000000000409ed3 in xdr_mountlist (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:93
   #18 0x000000000040a02c in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b530) at mount_xdr.c:107
   #19 0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   #20 0x00007ffff7b70de1 in xdr_pointer () from /lib64/libc.so.6
   #21 0x0000000000409ed3 in xdr_mountlist (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:93
   #22 0x000000000040a02c in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b590) at mount_xdr.c:107
   #23 0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   #24 0x00007ffff7b70de1 in xdr_pointer () from /lib64/libc.so.6
   #25 0x0000000000409ed3 in xdr_mountlist (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:93
   #26 0x000000000040a02c in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b470) at mount_xdr.c:107
   #27 0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   #28 0x00007ffff7b70de1 in xdr_pointer () from /lib64/libc.so.6
   #29 0x0000000000409ed3 in xdr_mountlist (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:93
   #30 0x000000000040a02c in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b4d0) at mount_xdr.c:107
   #31 0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   #32 0x00007ffff7b70de1 in xdr_pointer () from /lib64/libc.so.6
   #33 0x0000000000409ed3 in xdr_mountlist (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:93
   #34 0x000000000040a02c in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b530) at mount_xdr.c:107
   #35 0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   #36 0x00007ffff7b70de1 in xdr_pointer () from /lib64/libc.so.6
   #37 0x0000000000409ed3 in xdr_mountlist (xdrs=<value optimized out>, 
objp=<value optimized out>) at mount_xdr.c:93
   #38 0x000000000040a02c in xdr_mountbody (xdrs=0x63afd0, 
objp=0x63b590) at mount_xdr.c:107
   #39 0x00007ffff7b70e20 in xdr_reference_internal () from /lib64/libc.so.6
   (...)

Seems like two procedures (xdr_mountlist and xdr_mountbody) call one 
another infinitely until they fill the stack completely and then 
segfault occures.

Is it known problem?
Maybe I misconfigured or missed something?


             reply	other threads:[~2011-01-12 11:40 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-01-12 11:31 sdrb [this message]
2011-01-12 13:51 ` Issue in nfs-utils 1.2.3 sdrb
2011-01-12 16:04   ` J. Bruce Fields
2011-01-13 15:47     ` Chuck Lever
2011-01-13 15:52       ` J. Bruce Fields

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4D2D910F.1080703@onet.eu \
    --to=sdrb@onet.eu \
    --cc=linux-nfs@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).