[tac_plus] Strange Crash

[Heasley]

Am 29.04.2018 um 21:38 schrieb Daniel Schmidt <daniel.schmidt at wyo.gov>:
> 
> Thank you very much, I will rebuild and provide the core file.  It is exceedingly odd that old version of the libpam google auth works fine and the new one causes tac_plus to crash, but just with pap/nexus.  I could also provide instructions to recreate the issue yourself if you have nexus.  

I‘ll need the executable too and possibly the build dir. If you like, i can provide the executable. 

I have an older 3k now, so i could reproduce it if you provide the procedure. 

> 
>> On Sun, Apr 29, 2018 at 9:09 AM, heasley <heas at shrubbery.net> wrote:
>> Sat, Apr 28, 2018 at 11:59:14AM -0600, Daniel Schmidt:
>> > Well, that's just weird.  Why does the latest libpam google authenticator
>> > crash when using pap?  Works just fine for login.  Old libpam google
>> > doesn't crash.  Not sure where the problem is.
>> > 
>> > ╭─dans at cwacs ~/google-authenticator-libpam  ‹master›
>> > ╰─$ *** Error in `tac_plus': double free or corruption (!prev):
>> > 0x0000000000b3c000 ***
>> > ======= Backtrace: =========
>> > /lib/x86_64-linux-gnu/libc.so.6(+0x777e5)[0x7fb0082a37e5]
>> > /lib/x86_64-linux-gnu/libc.so.6(+0x8037a)[0x7fb0082ac37a]
>> > /lib/x86_64-linux-gnu/libc.so.6(cfree+0x4c)[0x7fb0082b053c]
>> > tac_plus[0x408f6a]
>> > tac_plus[0x404234]
>> > tac_plus[0x4129d0]
>> > tac_plus[0x40312f]
>> > /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0)[0x7fb00824c830]
>> > tac_plus[0x4037a9]
>> > ======= Memory map: ========
>> > 00400000-0041b000 r-xp 00000000 fc:00 135832
>> > /usr/local/bin/tac_plus
>> > 0061a000-0061b000 r--p 0001a000 fc:00 135832
>> > /usr/local/bin/tac_plus
>> > 0061b000-0061c000 rw-p 0001b000 fc:00 135832
>> > /usr/local/bin/tac_plus
>> > 0061c000-0061f000 rw-p 00000000 00:00 0
>> > 00b39000-00b5a000 rw-p 00000000 00:00 0
>> > [heap]
>> > (and so on)
>> > 
>> 
>> looking at the code surrounding the calls to PAM, its not obvious, if
>> its even there.
>> 
>> perhaps you can build tacacs with symbols and collect a core to share?
> 
> 
> 
> E-Mail to and from me, in connection with the transaction 
> of public business, is subject to the Wyoming Public Records 
> Act and may be disclosed to third parties.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20180430/5871163e/attachment.html>