#950518 gssproxy: segfault when debug is enabled

Package:
gssproxy
Source:
gssproxy
Description:
Privilege separation daemon for GSSAPI
Submitter:
Vincent Danjean
Date:
2021-02-04 10:51:03 UTC
Severity:
normal
#950518#5
Date:
2020-02-02 22:56:07 UTC
From:
To:
  In one of my machines, debug was enabled in /etc/gssproxy/gssproxy.conf
(so it tells me that, contrary to the message from the daemon, this file
is indeed read, see #950514). It was probably done before the strech->buster
update.
  I saw that, when debug is enabled, gssproxy segfault at start.
Removing the debug option makes gssproxy working.

# cat /etc/gssproxy/gssproxy.conf
[gssproxy]
debug=true
debug_level=2
# tail /var/log/syslog
[...]
Feb  2 23:06:06 ge91098 systemd[1]: Starting LSB: Controls operation of the gssproxy daemon...
Feb  2 23:06:06 ge91098 gssproxy[21077]: [2020/02/02 22:06:06]: Debug Enabled (level: 2)
Feb  2 23:06:06 ge91098 gssproxy[21077]: [2020/02/02 22:06:06]: Client [2020/02/02 22:06:06]: (/usr/sbin/gssproxy) [2020/02/02 22:06:06]:  connected (fd = 10)[2020/02/02 22:06:06]:  (pid = 21085) (uid = 0) (gid = 0)
Feb  2 23:06:06 ge91098 kernel: [258173.020117] gssproxy[21085]: segfault at 0 ip 00007fa622cf8e5a sp 00007fffe3e72e30 error 4 in libselinux.so.1[7fa622cec000+25000]
Feb  2 23:06:06 ge91098 kernel: [258173.020127] Code: c7 45 00 16 00 00 00 e9 df fe ff ff 0f 1f 40 00 bf 01 00 00 00 45 31 f6 e9 4c ff ff ff 0f 1f 00 41 55 41 54 55 53 48 83 ec 08 <4c> 8b 27 49 8b 3c 24 48 85 ff 74 05 e8 95 91 ff ff 49 8d 5c 24 08
Feb  2 23:06:06 ge91098 systemd[1]: gssproxy.service: Succeeded.
# systemctl status gssproxy
● gssproxy.service - LSB: Controls operation of the gssproxy daemon
   Loaded: loaded (/etc/init.d/gssproxy; generated)
  Drop-In: /etc/systemd/system/gssproxy.service.d
           └─restart.conf
   Active: activating (auto-restart) since Sun 2020-02-02 23:53:14 CET; 991ms ago
     Docs: man:systemd-sysv-generator(8)
  Process: 21645 ExecStart=/etc/init.d/gssproxy start (code=exited, status=0/SUCCESS)
  Process: 21659 ExecStop=/etc/init.d/gssproxy stop (code=exited, status=0/SUCCESS)

Note: the drop-In restart.conf file is here to make the service automatically
restart in case of failure: the service is required on my machines.

  Regards,
   Vincent

#950518#10
Date:
2020-02-06 17:19:32 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
gssproxy, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 950518@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Robbie Harwood (frozencemetery) <rharwood@club.cc.cmu.edu> (supplier of updated gssproxy package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 05 Feb 2020 19:17:32 -0500
Source: gssproxy
Architecture: source
Version: 0.8.2-1
Distribution: unstable
Urgency: medium
Maintainer: Robbie Harwood (frozencemetery) <rharwood@club.cc.cmu.edu>
Changed-By: Robbie Harwood (frozencemetery) <rharwood@club.cc.cmu.edu>
Closes: 856965 875468 950518
Changes:
 gssproxy (0.8.2-1) unstable; urgency=medium
 .
   * New upstream version 0.8.2 (Closes: #950518)
   * Bump standards version and lintian clean
   * Switch to upstream's systemd unit (Closes: #875468)
   * Stop providing NFS server config snippet (Closes: #856965)
Checksums-Sha1:
 9663ddd6c9843d91ff8200dc73bc11a6089ac60f 2350 gssproxy_0.8.2-1.dsc
 d398b27cc9042cfea79f6880f00bd9c3d54436bb 168202 gssproxy_0.8.2.orig.tar.gz
 71b311df7ed1f6e5b4bfa6348742c129c99f99ea 3952 gssproxy_0.8.2-1.debian.tar.xz
 2f647e4af47fca0a64d12f0ea9a07f25a65a74fc 7659 gssproxy_0.8.2-1_source.buildinfo
Checksums-Sha256:
 9f61dff5e9310101001db3eb880de8c05ce2a5739e1fca0cefcc7e60ae2e1bab 2350 gssproxy_0.8.2-1.dsc
 95691ed8f994d911925f370d924bff2c8e9946c8478b0de069a751c91bc801cd 168202 gssproxy_0.8.2.orig.tar.gz
 6b6591ac01401d90604ec1373d19c2b259b3ff19eb65e813e2abf3e03582967a 3952 gssproxy_0.8.2-1.debian.tar.xz
 b8628eba881c5b0c51c5fbf2cc4fdd816937f3d3cf40477d32e1741b8e7bf3bf 7659 gssproxy_0.8.2-1_source.buildinfo
Files:
 d9e49caa89ff5bef9d6698d05ead35ef 2350 net optional gssproxy_0.8.2-1.dsc
 0482543d7d0901af0fbfa5807956d62c 168202 net optional gssproxy_0.8.2.orig.tar.gz
 127d6ab412ab6c81e8fb3b8ceb4b2f61 3952 net optional gssproxy_0.8.2-1.debian.tar.xz
 daeb19106b4c6cdf1d438a9ba9b0ed82 7659 net optional gssproxy_0.8.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=x/0O
-----END PGP SIGNATURE-----

#950518#21
Date:
2021-02-04 10:47:23 UTC
From:
To:
  Hi,

  I backported gssproxy/0.8.2-1 (gssproxy/0.8.2-2 is not fully commited in
the git repo) and saw that this bug is still present:

Feb  4 11:01:37 ge132116vm-1 systemd[1]: Starting GSSAPI Proxy Daemon...
Feb  4 11:01:37 ge132116vm-1 gssproxy[1455]: [2021/02/04 10:01:37]: Debug Enabled (level: 1)
Feb  4 11:01:37 ge132116vm-1 systemd[1]: Started GSSAPI Proxy Daemon.
Feb  4 11:01:37 ge132116vm-1 gssproxy[1455]: [2021/02/04 10:01:37]: Client [2021/02/04 10:01:37]: (/usr/sbin/gssproxy) [2021/02/04 10:01:37]:  connected (fd = 10)[2021/02/04 10:01:37]:  (pid = 1456) (uid = 0) (gid = 0)
Feb  4 11:01:37 ge132116vm-1 systemd[1]: gssproxy.service: Main process exited, code=killed, status=11/SEGV
Feb  4 11:01:37 ge132116vm-1 kernel: [471673.673095] gssproxy[1456]: segfault at 0 ip 00007fc521abfe5a sp 00007ffe0a035a50 error 4 in libselinux.so.1[7fc521ab3000+25000]
Feb  4 11:01:37 ge132116vm-1 kernel: [471673.673103] Code: c7 45 00 16 00 00 00 e9 df fe ff ff 0f 1f 40 00 bf 01 00 00 00 45 31 f6 e9 4c ff ff ff 0f 1f 00 41 55 41 54 55 53 48 83 ec 08 <4c> 8b 27 49 8b 3c 24 48 85 ff 74 05 e8 95 91 ff ff 49 8d 5c 24 08
Feb  4 11:01:37 ge132116vm-1 systemd[1]: gssproxy.service: Failed with result 'signal'.

# apt-cache policy gssproxy
gssproxy:
  Installé : 0.8.2-1~bpo10+1


Removing the debug line in the config allows gssproxy to start.

  Regards,
    Vincent