[OpenAFS-devel] openafs-1.2.9-Server Bug

[Dunaevskiy]

Dear Ladies and Gentlemanes,
i have started the configure with options:
  --enable-fast-restart
  --enable-bitmap-later
  --enable-full-vos-listvol-switch
  --enable-transarc-paths
  --enable-tivoli-tsm
  --enable-debug-kernel
after crashes of openafs-1.2.9-Server with different linux kernels(IA32,SMP),
follow by compile and install of this version on the crashed server.

After the last crash i became a core-file (core.524), which i have
debugged.
GDB output of
 gdb /usr/afs/bin/fileserver --core=core.524

is

Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libpthread.so.0...done.
Loaded symbols for /lib/libpthread.so.0
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
#0  0x08069cab in afsUUID_to_string (uuid=0x1cb589, str=0x1ef9910f
<Address 0x1ef9910f out of bounds>,
    strsz=3145817277) at ../util/uuid.c:221
221         snprintf(str, strsz,

i.e.  a problem with source code from
AFS_SOURCE_DIR/src/util/uuid.c line 221
i.e. a problem with follow call


{
    snprintf(str, strsz,
             "%08x-%04x-%04x-%02x-%02x-%02x%02x%02x%02x%02x%02x",
             uuid->time_low,
             uuid->time_mid,
             uuid->time_hi_and_version,
             (unsigned char)uuid->clock_seq_hi_and_reserved,
             (unsigned char)uuid->clock_seq_low,
             (unsigned char)uuid->node[0],
             (unsigned char)uuid->node[1],
             (unsigned char)uuid->node[2],
             (unsigned char)uuid->node[3],
             (unsigned char)uuid->node[4],
             (unsigned char)uuid->node[5]);

    return 0;
}


str, strsz seems to have a wrong adress or a wrong length.


Dear developers, please check this problem !!!

A.Dunaevskiy,LRZ,Munich