FS#53993 - [freeradius] Segmentation fault during session resumption

Attached to Project: Community Packages
Opened by Dimitar Petrov (dpetrov) - Tuesday, 09 May 2017, 19:25 GMT
Last edited by Sergej Pupykin (sergej) - Wednesday, 21 June 2017, 11:04 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Sergej Pupykin (sergej)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

freeradius is crashing with SIGSEGV, during session resumption.


Additional info:
* package version(s): 3.0.13-1
* config and/or log files etc.


Steps to reproduce:
Brind the server up and wait for session resumption from one of the clients.

Backtrace:
(23) # Executing group from file /etc/raddb/sites-enabled/default
(23) authenticate {
(23) eap: Expiring EAP session with state 0x6e8dea826fc0fff4
(23) eap: Finished EAP session with state 0x6e8dea826fc0fff4
(23) eap: Previous EAP request found for state 0x6e8dea826fc0fff4, released from the list
(23) eap: Peer sent packet with method EAP TTLS (21)
(23) eap: Calling submodule eap_ttls to process data
(23) eap_ttls: Authenticate
(23) eap_ttls: Continuing EAP-TLS
(23) eap_ttls: [eaptls verify] = ok
(23) eap_ttls: Done initial handshake
(23) eap_ttls: TLS_accept: SSLv3/TLS write finished
(23) eap_ttls: TLS_accept: SSLv3/TLS read change cipher spec
(23) eap_ttls: <<< recv TLS 1.2 [length 0010]
(23) eap_ttls: TLS_accept: SSLv3/TLS read finished
(23) eap_ttls: (other): SSL negotiation finished successfully
(23) eap_ttls: SSL Connection Established
(23) eap_ttls: SSL Application Data
(23) eap_ttls: Adding cached attributes from session e324eb881ae66360c101f0772acdbe777fa9d09be0189b5b4727a6c21c15c5a5

Program received signal SIGSEGV, Segmentation fault.
0xb769ce89 in eaptls_process () from /usr/lib/freeradius/libfreeradius-eap.so
(gdb)
(gdb)
(gdb)
(gdb) bt full
#0 0xb769ce89 in eaptls_process () from /usr/lib/freeradius/libfreeradius-eap.so
No symbol table info available.
#1 0xb75fb36f in ?? () from /usr/lib/freeradius/rlm_eap_ttls.so
No symbol table info available.
#2 0xb76a8be0 in ?? () from /usr/lib/freeradius/rlm_eap.so
No symbol table info available.
#3 0xb76a9121 in eap_method_select () from /usr/lib/freeradius/rlm_eap.so
No symbol table info available.
#4 0xb76a7f26 in ?? () from /usr/lib/freeradius/rlm_eap.so
No symbol table info available.
#5 0x0806b549 in ?? ()
No symbol table info available.
#6 0x0806a705 in ?? ()
No symbol table info available.
#7 0x0806a9e3 in ?? ()
No symbol table info available.
#8 0x0806bae2 in modcall ()
No symbol table info available.
#9 0x08066476 in indexed_modcall ()
No symbol table info available.
#10 0x080676de in process_authenticate ()
No symbol table info available.
#11 0x08054d9d in rad_authenticate ()
No symbol table info available.
#12 0x08079a57 in ?? ()
No symbol table info available.
#13 0x08075a16 in ?? ()
No symbol table info available.
#14 0x080772f7 in request_receive ()
No symbol table info available.
#15 0x08060ecf in ?? ()
No symbol table info available.
#16 0x0807400d in ?? ()
No symbol table info available.
---Type <return> to continue, or q <return> to quit---
#17 0xb7f80456 in fr_event_loop () from /usr/lib/freeradius/libfreeradius-radius.so
No symbol table info available.
#18 0x0807af34 in radius_event_process ()
No symbol table info available.
#19 0x08053eef in main ()
No symbol table info available.
(gdb)
This task depends upon

Closed by  Sergej Pupykin (sergej)
Wednesday, 21 June 2017, 11:04 GMT
Reason for closing:  Fixed
Additional comments about closing:  should be fixed in 3.0.14
Comment by Dimitar Petrov (dpetrov) - Wednesday, 10 May 2017, 19:09 GMT
Looks like building HEAD of 3.0.x branch (0ba06f0) might have fixed it for me.
Freeradius have been up and running for couple of hours without a crash.

Here is the issue I have opened with freeradius.
https://github.com/FreeRADIUS/freeradius-server/issues/1984

Loading...