Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

63 views

Skip to first unread message

François Lafont

unread,

Apr 13, 2013, 8:10:02 PM4/13/13

Hi,

I used Samba 4.0.5 in Wheezy. Here is that I have done:

---------------------------------------------------------------
samba-tool domain provision --realm=CHEZMOI.PRIV --domain=CHEZMOI \
--server-role=dc --dns-backend=SAMBA_INTERNAL --adminpass='+toto123'
echo "nameserver 192.168.0.21" > /etc/resolv.conf
samba

ln -s /usr/local/samba/lib/libnss_winbind.so /lib/libnss_winbind.so
ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2

# I put "winbind" in the nsswitch.conf file.
sed -i -r -e 's/^(passwd:.*)$/\1 winbind/g' -e 's/^(group:.*)$/\1 winbind/g' /etc/nsswitch.conf

samba-tool user add test1 "+test123"
---------------------------------------------------------------

That's all. Here is my smb.conf after this commands:

---------------------------------------------------------------
# Global parameters
[global]
workgroup = CHEZMOI
realm = CHEZMOI.PRIV
netbios name = WHEEZY-1
server role = active directory domain controller
dns forwarder = 212.27.40.241

[netlogon]
path = /usr/local/samba/var/locks/sysvol/chezmoi.priv/scripts
read only = No

[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No
---------------------------------------------------------------

It seems to work well:

---------------------------------------------------------------
~# getent passwd

[couic...]

CHEZMOI\Administrator:*:0:100::/home/CHEZMOI/Administrator:/bin/false
CHEZMOI\Guest:*:3000011:3000012::/home/CHEZMOI/Guest:/bin/false
CHEZMOI\krbtgt:*:3000016:100::/home/CHEZMOI/krbtgt:/bin/false
CHEZMOI\test1:*:3000017:100::/home/CHEZMOI/test1:/bin/false

~# wbinfo -u
Administrator
Guest
krbtgt
test1

# wbinfo -g
Enterprise Read-Only Domain Controllers
Domain Admins
Domain Users
Domain Guests
Domain Computers
Domain Controllers
Schema Admins
Enterprise Admins
Group Policy Creator Owners
Read-Only Domain Controllers
DnsUpdateProxy
---------------------------------------------------------------

But there is something curious with the /usr/local/samba/var/locks/sysvol/ directory:

---------------------------------------------------------------
# ls -n /usr/local/samba/var/locks/sysvol/
total 8
drwxrws---+ 4 0 3000000 4096 Apr 14 01:40 chezmoi.priv
---------------------------------------------------------------

Which group has the gid 3000000?

---------------------------------------------------------------
# wbinfo -g | tr '\n' '\0' | xargs -0 -n 1 wbinfo --group-info
CHEZMOI\Enterprise Read-Only Domain Controllers:*:3000018:
CHEZMOI\Domain Admins:*:3000008:
CHEZMOI\Domain Users:*:100:
CHEZMOI\Domain Guests:*:3000012:
CHEZMOI\Domain Computers:*:3000019:
CHEZMOI\Domain Controllers:*:3000020:
CHEZMOI\Schema Admins:*:3000007:
CHEZMOI\Enterprise Admins:*:3000006:
CHEZMOI\Group Policy Creator Owners:*:3000004:
CHEZMOI\Read-Only Domain Controllers:*:3000021:
CHEZMOI\DnsUpdateProxy:*:3000022:
---------------------------------------------------------------

There is no 3000000 gid. And, a bit more embarrassing, if I use "ls -l" to resolv the gid to a name, winbind is crashing:

---------------------------------------------------------------
# time ls -l /usr/local/samba/var/locks/sysvol
total 8
drwxrws---+ 4 root 3000000 4096 Apr 14 01:40 chezmoi.priv

real 0m33.483s # <---- 33 seconds !
user 0m0.012s
sys 0m0.000s

# wbinfo -u
Error looking up domain users

# wbinfo -g
failed to call wbcListGroups: WBC_ERR_WINBIND_NOT_AVAILABLE
Error looking up domain groups

# wbinfo -i Guest
failed to call wbcGetpwnam: WBC_ERR_WINBIND_NOT_AVAILABLE
Could not get info for user Guest

# wbinfo -p
Ping to winbindd failed
could not ping winbindd!
---------------------------------------------------------------

I have to restart samba:

---------------------------------------------------------------
# killall samba; sleep 2; samba

# wbinfo -u
Administrator
Guest
krbtgt
test1

# wbinfo -p
Ping to winbindd succeeded
---------------------------------------------------------------

Have I made a mistake? Where is the problem?
Thanks in advande.

--
François Lafont
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Andrew Bartlett

unread,

Apr 14, 2013, 2:40:01 AM4/14/13

On Sun, 2013-04-14 at 02:08 +0200, François Lafont wrote:
> Hi,
>
> I used Samba 4.0.5 in Wheezy. Here is that I have done:

> But there is something curious with the /usr/local/samba/var/locks/sysvol/ directory:

>
> ---------------------------------------------------------------
> # ls -n /usr/local/samba/var/locks/sysvol/
> total 8
> drwxrws---+ 4 0 3000000 4096 Apr 14 01:40 chezmoi.priv
> ---------------------------------------------------------------
>
> Which group has the gid 3000000?

The files are owned by the domain administrators group. Winbind doesn't
know how to make up a 'user' record for that group yet.

> ---------------------------------------------------------------
> # wbinfo -g | tr '\n' '\0' | xargs -0 -n 1 wbinfo --group-info
> CHEZMOI\Enterprise Read-Only Domain Controllers:*:3000018:
> CHEZMOI\Domain Admins:*:3000008:
> CHEZMOI\Domain Users:*:100:
> CHEZMOI\Domain Guests:*:3000012:
> CHEZMOI\Domain Computers:*:3000019:
> CHEZMOI\Domain Controllers:*:3000020:
> CHEZMOI\Schema Admins:*:3000007:
> CHEZMOI\Enterprise Admins:*:3000006:
> CHEZMOI\Group Policy Creator Owners:*:3000004:
> CHEZMOI\Read-Only Domain Controllers:*:3000021:
> CHEZMOI\DnsUpdateProxy:*:3000022:
> ---------------------------------------------------------------
>
> There is no 3000000 gid. And, a bit more embarrassing, if I use "ls -l" to resolv the gid to a name, winbind is crashing:

Can you please try to get a gdb backtrace, or better still run 'samba'
under valgrind? We would very much like to fix that.

You could also file these details in a bug, if we don't sort it out
quickly.

Thanks,

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org

Rowland Penny

unread,

Apr 14, 2013, 4:10:02 AM4/14/13

On 14/04/13 07:30, Andrew Bartlett wrote:
> On Sun, 2013-04-14 at 02:08 +0200, François Lafont wrote:
>> Hi,
>>
>> I used Samba 4.0.5 in Wheezy. Here is that I have done:
>> But there is something curious with the /usr/local/samba/var/locks/sysvol/ directory:
>>
>> ---------------------------------------------------------------
>> # ls -n /usr/local/samba/var/locks/sysvol/
>> total 8
>> drwxrws---+ 4 0 3000000 4096 Apr 14 01:40 chezmoi.priv
>> ---------------------------------------------------------------
>>
>> Which group has the gid 3000000?
> The files are owned by the domain administrators group. Winbind doesn't
> know how to make up a 'user' record for that group yet.

In that case, would you like to explain why, if I add a user to Domain
Admins and then mount a share as the user from the S4 server via cifs,
all the files get saved as user 3000000?

Rowland

>
>> ---------------------------------------------------------------
>> # wbinfo -g | tr '\n' '\0' | xargs -0 -n 1 wbinfo --group-info
>> CHEZMOI\Enterprise Read-Only Domain Controllers:*:3000018:
>> CHEZMOI\Domain Admins:*:3000008:
>> CHEZMOI\Domain Users:*:100:
>> CHEZMOI\Domain Guests:*:3000012:
>> CHEZMOI\Domain Computers:*:3000019:
>> CHEZMOI\Domain Controllers:*:3000020:
>> CHEZMOI\Schema Admins:*:3000007:
>> CHEZMOI\Enterprise Admins:*:3000006:
>> CHEZMOI\Group Policy Creator Owners:*:3000004:
>> CHEZMOI\Read-Only Domain Controllers:*:3000021:
>> CHEZMOI\DnsUpdateProxy:*:3000022:
>> ---------------------------------------------------------------
>>
>> There is no 3000000 gid. And, a bit more embarrassing, if I use "ls -l" to resolv the gid to a name, winbind is crashing:
> Can you please try to get a gdb backtrace, or better still run 'samba'
> under valgrind? We would very much like to fix that.
>
> You could also file these details in a bug, if we don't sort it out
> quickly.
>
> Thanks,
>
> Andrew Bartlett
>

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

François Lafont

unread,

Apr 14, 2013, 7:50:01 AM4/14/13

Le 14/04/2013 08:30, Andrew Bartlett a écrit :

>> ---------------------------------------------------------------
>> # ls -n /usr/local/samba/var/locks/sysvol/
>> total 8
>> drwxrws---+ 4 0 3000000 4096 Apr 14 01:40 chezmoi.priv
>> ---------------------------------------------------------------
>>
>> Which group has the gid 3000000?
>
> The files are owned by the domain administrators group.

Do you mean the "CN=Administrators,CN=Builtin,DC=chezmoi,DC=priv" group?

Why don't this group appear with the "wbinfo -g" command?

---------------------------------------------------------------

> Winbind doesn't
> know how to make up a 'user' record for that group yet.

And it's not a normal behavior, isn't it?

> Can you please try to get a gdb backtrace, or better still run 'samba'
> under valgrind? We would very much like to fix that.

Sorry, I don't know how to do that, I'm a samba beginner. I'm going to search, meanwhile, here is the ouput of the "samba -i -M single -d 10" command during the "ls -l /usr/local/samba/var/locks/sysvol/" problem.

Thanks for your help.

--
François Lafont

François Lafont

unread,

Apr 14, 2013, 8:00:01 AM4/14/13

Le 14/04/2013 13:49, François Lafont a écrit :

> I'm going to search, meanwhile, here is the ouput of the "samba -i -M single -d 10" command during the "ls -l /usr/local/samba/var/locks/sysvol/" problem.

Ooups! Sorry I have forgotten the url address:
http://sisco.laf.free.fr/codes/samba4_gid_3000000.log

François Lafont

unread,

Apr 15, 2013, 4:20:02 AM4/15/13

Le 14/04/2013 13:51, François Lafont a écrit :

>> I'm going to search, meanwhile, here is the ouput of the "samba -i -M single -d 10" command during the "ls -l /usr/local/samba/var/locks/sysvol/" problem.
>
> Ooups! Sorry I have forgotten the url address:
> http://sisco.laf.free.fr/codes/samba4_gid_3000000.log

Will that information be enough? Or should I provide other things?

François Lafont

unread,

Apr 19, 2013, 5:10:02 PM4/19/13

Hi,

I go back to this thread (the title is explicit) just to have news. I have seen in other threads that other people have similar problems. Should we consider this problem as a bug (in Samba 4.0.5) or is it a wrong installation from my part? In the first case, are information that I have given enough or should I provide other things? In the second case, I'm interesting by clues.

Thanks.

sa...@nisx.de

unread,

Apr 20, 2013, 8:10:01 AM4/20/13

Hi,

same problem here on all running systems. I would like to help too to get the problem out of the way.

Mit freundlichen Grüßen
Thomas Nolte
--
Nolte Infosysteme, Im Sikfeld 8, 38304 Wolfenbuettel
Tel 05331-946210, Fax 05331-946211, Handy 0170-5508198

Computer, Netzwerk, Kommunikation www.nisx.de

-----Ursprüngliche Nachricht-----
Von: samba-...@lists.samba.org [mailto:samba-...@lists.samba.org] Im Auftrag von François Lafont
Gesendet: Freitag, 19. April 2013 23:08
An: sa...@lists.samba.org
Betreff: Re: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

Michael Wood

unread,

Apr 20, 2013, 2:10:02 PM4/20/13

Hi

As Andrew suggested it would be good if you could run it under
valgrind and reproduce the crash. Also, you should probably log a bug
in bugzilla.

--
Michael Wood <esio...@gmail.com>

François Lafont

unread,

Apr 21, 2013, 8:10:02 AM4/21/13

Hello,

Le 20/04/2013 20:00, Michael Wood a écrit :

> As Andrew suggested it would be good if you could run it under
> valgrind and reproduce the crash.

I don't know valgrind sorry. In spite of all, I have tried this:

---------------------------------------------------------------
apt-get install valgrind

./configure --enable-debug #<--- I add the --enable-debug
make
make install

samba-tool domain provision --realm=CHEZMOI.PRIV --domain=CHEZMOI --server-role=dc --dns-backend=SAMBA_INTERNAL --adminpass='+toto123'
echo "nameserver 192.168.0.21" > /etc/resolv.conf
samba

ln -s /usr/local/samba/lib/libnss_winbind.so /lib/libnss_winbind.so
ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2

# I put "winbind" in the nsswitch.conf file.
sed -i -r -e 's/^(passwd:.*)$/\1 winbind/g' -e 's/^(group:.*)$/\1 winbind/g' /etc/nsswitch.conf

valgrind --leak-check=full samba -i M single > out 2>&1
---------------------------------------------------------------

Here is the output during the "ls -l /usr/local/samba/var/locks/sysvol/" problem:

http://sisco.laf.free.fr/codes/samba4_gid_3000000_valgrind.log

Will that be enough?

> Also, you should probably log a bug in bugzilla.

It's done: https://bugzilla.samba.org/show_bug.cgi?id=9820

Michael Wood

unread,

Apr 22, 2013, 7:40:01 AM4/22/13

Did winbind also crash when you ran it under valgrind?

Perhaps you should attach the two logs directly to the bug instead of
just linking to them.

One of the Samba developers will have to let you know if the
information you have provided is enough.

Regards,
Michael

--
Michael Wood <esio...@gmail.com>

François Lafont

unread,

Apr 22, 2013, 7:40:01 PM4/22/13

[Ooops, sorry Michael for my first message, I have made a mistake with the recipients]

Hello,

Le 22/04/2013 13:29, Michael Wood a écrit :

> Did winbind also crash when you ran it under valgrind?

Yes, I think so. I have done 2 tests with "valgrind --leak-check=full samba -i M single > out 2>&1" and for the 2 tests I have the same problem:

------------------------------------------

~# wbinfo -u
Administrator
Guest
krbtgt
test1

~# time ls -l /usr/local/samba/var/locks/sysvol/
total 8
drwxrws---+ 4 root 3000000 4096 Apr 21 13:00 chezmoi.priv

real 1m13.350s
user 0m0.000s
sys 0m0.068s

~# wbinfo -u

Error looking up domain users

------------------------------------------

> Perhaps you should attach the two logs directly to the bug instead of
> just linking to them.

Ok, it's done.

> One of the Samba developers will have to let you know if the
> information you have provided is enough.

Ok, thanks for your help Michael. :)

--
François Lafont

sa...@nisx.de

unread,

Apr 24, 2013, 7:00:02 AM4/24/13

Hi again,

sorry only this groups:

517,518,519,520,533,544,545,546,547,548,549,550,551,552,554,555,556,557,558,559,560,561

Mit freundlichen Grüßen
Thomas Nolte
--
Nolte Infosysteme, Im Sikfeld 8, 38304 Wolfenbuettel
Tel 05331-946210, Fax 05331-946211, Handy 0170-5508198

Computer, Netzwerk, Kommunikation www.nisx.de

-----Ursprüngliche Nachricht-----
Von: samba-...@lists.samba.org [mailto:samba-...@lists.samba.org] Im Auftrag von Thomas Nolte
Gesendet: Mittwoch, 24. April 2013 12:52

An: sa...@lists.samba.org
Betreff: Re: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

Hi there,

I have done this:
useradd -d /tmp -M -s /bin/false -u 3000000 -g 100 -o -l samba4-workaround0 and also for users from 3000001 up to 3000008.

groupadd -g 516 -o samba4-workaround-group 516 and also for groups from 517 up to 561.

Now all group and user ids are masked, which let winbind crashes:

root@leela:~# ll /opt/samba/var/locks/sysvol insgesamt 4
drwxrws---+ 4 root samba4-workaround-group544 35 Mär 18 00:41
drwxrws---+ futurama.loc

Regards

Thomas Nolte
--
Nolte Infosysteme, Im Sikfeld 8, 38304 Wolfenbuettel Tel 05331-946210, Fax 05331-946211, Handy 0170-5508198

Computer, Netzwerk, Kommunikation www.nisx.de

-----Ursprüngliche Nachricht-----
Von: samba-...@lists.samba.org [mailto:samba-...@lists.samba.org] Im Auftrag von François Lafont

Gesendet: Dienstag, 23. April 2013 01:37
An: sa...@lists.samba.org
Cc: Andrew Bartlett

Betreff: Re: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

[Ooops, sorry Michael for my first message, I have made a mistake with the recipients]

Hello,

Le 22/04/2013 13:29, Michael Wood a écrit :

> Did winbind also crash when you ran it under valgrind?

Yes, I think so. I have done 2 tests with "valgrind --leak-check=full samba -i M single > out 2>&1" and for the 2 tests I have the same problem:

------------------------------------------

~# wbinfo -u
Administrator
Guest
krbtgt
test1

~# time ls -l /usr/local/samba/var/locks/sysvol/
total 8

drwxrws---+ 4 root 3000000 4096 Apr 21 13:00 chezmoi.priv

real 1m13.350s
user 0m0.000s
sys 0m0.068s

~# wbinfo -u

Error looking up domain users

------------------------------------------

> Perhaps you should attach the two logs directly to the bug instead of
> just linking to them.

Ok, it's done.

> One of the Samba developers will have to let you know if the
> information you have provided is enough.

Ok, thanks for your help Michael. :)

sa...@nisx.de

unread,

Apr 24, 2013, 7:00:02 AM4/24/13

Hi there,

I have done this:
useradd -d /tmp -M -s /bin/false -u 3000000 -g 100 -o -l samba4-workaround0
and also for users from 3000001 up to 3000008.

groupadd -g 516 -o samba4-workaround-group 516
and also for groups from 517 up to 561.

Now all group and user ids are masked, which let winbind crashes:

root@leela:~# ll /opt/samba/var/locks/sysvol
insgesamt 4

drwxrws---+ 4 root samba4-workaround-group544 35 Mär 18 00:41 futurama.loc

Regards
Thomas Nolte
--
Nolte Infosysteme, Im Sikfeld 8, 38304 Wolfenbuettel
Tel 05331-946210, Fax 05331-946211, Handy 0170-5508198

Computer, Netzwerk, Kommunikation www.nisx.de

-----Ursprüngliche Nachricht-----
Von: samba-...@lists.samba.org [mailto:samba-...@lists.samba.org] Im Auftrag von François Lafont
Gesendet: Dienstag, 23. April 2013 01:37
An: sa...@lists.samba.org
Cc: Andrew Bartlett
Betreff: Re: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

[Ooops, sorry Michael for my first message, I have made a mistake with the recipients]

sa...@nisx.de

unread,

Apr 24, 2013, 8:10:02 AM4/24/13

Hi,

could you or anyone tell me how to do this? I have never used gdb.

Mit freundlichen Grüßen

Thomas Nolte
--
Nolte Infosysteme, Im Sikfeld 8, 38304 Wolfenbuettel
Tel 05331-946210, Fax 05331-946211, Handy 0170-5508198

Computer, Netzwerk, Kommunikation www.nisx.de

-----Ursprüngliche Nachricht-----

Von: Volker Lendecke [mailto:Volker....@SerNet.DE]
Gesendet: Mittwoch, 24. April 2013 13:35
An: Thomas Nolte

Betreff: Re: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

On Wed, Apr 24, 2013 at 12:51:51PM +0200, sa...@nisx.de wrote:
> Hi there,
>
> I have done this:
> useradd -d /tmp -M -s /bin/false -u 3000000 -g 100 -o -l
> samba4-workaround0 and also for users from 3000001 up to 3000008.
>
> groupadd -g 516 -o samba4-workaround-group 516 and also for groups
> from 517 up to 561.
>
> Now all group and user ids are masked, which let winbind crashes:
>
> root@leela:~# ll /opt/samba/var/locks/sysvol insgesamt 4
> drwxrws---+ 4 root samba4-workaround-group544 35 Mär 18 00:41

> drwxrws---+ futurama.loc

Wenn da irgend ein Prozess stirbt, brauchen wir von diesem Prozess ein "bt full" backtrace von gdb.

Viele Grüße,

Volker Lendecke

--
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.sernet.de, mailto:kon...@sernet.de

Andrew Bartlett

unread,

Apr 26, 2013, 5:40:02 AM4/26/13

On Sun, 2013-04-21 at 14:07 +0200, François Lafont wrote:
> Hello,
>
> Le 20/04/2013 20:00, Michael Wood a écrit :
>
> > As Andrew suggested it would be good if you could run it under
> > valgrind and reproduce the crash.
>
> I don't know valgrind sorry. In spite of all, I have tried this:
>
> ---------------------------------------------------------------
> apt-get install valgrind
>
> ./configure --enable-debug #<--- I add the --enable-debug
> make
> make install
>
> samba-tool domain provision --realm=CHEZMOI.PRIV --domain=CHEZMOI --server-role=dc --dns-backend=SAMBA_INTERNAL --adminpass='+toto123'
> echo "nameserver 192.168.0.21" > /etc/resolv.conf
> samba
>
> ln -s /usr/local/samba/lib/libnss_winbind.so /lib/libnss_winbind.so
> ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2
>
> # I put "winbind" in the nsswitch.conf file.
> sed -i -r -e 's/^(passwd:.*)$/\1 winbind/g' -e 's/^(group:.*)$/\1 winbind/g' /etc/nsswitch.conf
>
> valgrind --leak-check=full samba -i M single > out 2>&1

Can you try that again with:

valgrind samba -i -M single > out 2>&1

I'm not worried about memory leaks (they don't cause crashes), and
missing the '-' in front of -M probably means you didn't get the crash
in the log you gave. Either way, it's so large I can't make heads or
tails of it.

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org

sa...@nisx.de

unread,

Apr 26, 2013, 1:50:02 PM4/26/13

Hi,

same problem here:

root@leela:~# valgrind samba -i -M single > out 2>&1
root@leela:~# cat out
==4450== Memcheck, a memory error detector
==4450== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==4450== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==4450== Command: samba -i -M single
==4450==
samba version 4.0.5 started.
Copyright Andrew Tridgell and the Samba Team 1992-2012
samba: using 'single' process model
/opt/samba/sbin/smbd: sh: Zeile 0: test: Zu viele Argumente.
/opt/samba/sbin/smbd: sh: Zeile 0: test: Zu viele Argumente.
==4450== Invalid read of size 8
==4450== at 0xA20F1A0: krb5_cc_store_cred (cache.c:684)
==4450== by 0xA22487A: krb5_get_credentials_with_flags (get_cred.c:1207)
==4450== by 0xA2248C5: krb5_get_credentials (get_cred.c:1220)
==4450== by 0x956E1B7: gsskrb5_get_creds (init_sec_context.c:246)
==4450== by 0x956E73D: init_auth (init_sec_context.c:455)
==4450== by 0x956F52F: _gsskrb5_init_sec_context (init_sec_context.c:942)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== Address 0x26a8ac50 is 0 bytes inside a block of size 24 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0xA20F182: krb5_cc_close (cache.c:666)
==4450== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
==4450== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==4450== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 8
==4450== at 0xA236D90: mcc_store_cred (mcache.c:239)
==4450== by 0xA20F1BB: krb5_cc_store_cred (cache.c:684)
==4450== by 0xA22487A: krb5_get_credentials_with_flags (get_cred.c:1207)
==4450== by 0xA2248C5: krb5_get_credentials (get_cred.c:1220)
==4450== by 0x956E1B7: gsskrb5_get_creds (init_sec_context.c:246)
==4450== by 0x956E73D: init_auth (init_sec_context.c:455)
==4450== by 0x956F52F: _gsskrb5_init_sec_context (init_sec_context.c:942)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== Address 0x26a8ac60 is 16 bytes inside a block of size 24 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0xA20F182: krb5_cc_close (cache.c:666)
==4450== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
==4450== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==4450== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 4
==4450== at 0xA236D9C: mcc_store_cred (mcache.c:243)
==4450== by 0xA20F1BB: krb5_cc_store_cred (cache.c:684)
==4450== by 0xA22487A: krb5_get_credentials_with_flags (get_cred.c:1207)
==4450== by 0xA2248C5: krb5_get_credentials (get_cred.c:1220)
==4450== by 0x956E1B7: gsskrb5_get_creds (init_sec_context.c:246)
==4450== by 0x956E73D: init_auth (init_sec_context.c:455)
==4450== by 0x956F52F: _gsskrb5_init_sec_context (init_sec_context.c:942)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== Address 0x24f01e1c is 12 bytes inside a block of size 56 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0xA21DF11: krb5_data_free (data.c:66)
==4450== by 0xA236C3C: mcc_close (mcache.c:189)
==4450== by 0xA20F173: krb5_cc_close (cache.c:665)
==4450== by 0xA20F143: krb5_cc_destroy (cache.c:647)
==4450== by 0x5491FA6: free_mccache (credentials_krb5.c:127)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450==
==4450== Invalid read of size 8
==4450== at 0xA20F2C6: krb5_cc_get_principal (cache.c:748)
==4450== by 0x956E3FA: do_delegation (init_sec_context.c:328)
==4450== by 0x956EA54: init_auth_restart (init_sec_context.c:571)
==4450== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== Address 0x26a8ac50 is 0 bytes inside a block of size 24 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0xA20F182: krb5_cc_close (cache.c:666)
==4450== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
==4450== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==4450== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 8
==4450== at 0xA236F18: mcc_get_principal (mcache.c:270)
==4450== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
==4450== by 0x956E3FA: do_delegation (init_sec_context.c:328)
==4450== by 0x956EA54: init_auth_restart (init_sec_context.c:571)
==4450== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== Address 0x26a8ac60 is 16 bytes inside a block of size 24 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0xA20F182: krb5_cc_close (cache.c:666)
==4450== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
==4450== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==4450== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 4
==4450== at 0xA236F24: mcc_get_principal (mcache.c:272)
==4450== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
==4450== by 0x956E3FA: do_delegation (init_sec_context.c:328)
==4450== by 0x956EA54: init_auth_restart (init_sec_context.c:571)
==4450== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== Address 0x24f01e1c is 12 bytes inside a block of size 56 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0xA21DF11: krb5_data_free (data.c:66)
==4450== by 0xA236C3C: mcc_close (mcache.c:189)
==4450== by 0xA20F173: krb5_cc_close (cache.c:665)
==4450== by 0xA20F143: krb5_cc_destroy (cache.c:647)
==4450== by 0x5491FA6: free_mccache (credentials_krb5.c:127)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450==
==4450== Invalid read of size 4
==4450== at 0x956EB26: init_auth_restart (init_sec_context.c:606)
==4450== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==4450== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==4450== Address 0x25afc648 is 8 bytes inside a block of size 64 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0x957E5FA: _gsskrb5_release_cred (release_cred.c:73)
==4450== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==4450== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450==
==4450== Invalid write of size 4
==4450== at 0x956EB59: init_auth_restart (init_sec_context.c:613)
==4450== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==4450== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==4450== Address 0x24d8ab5c is 108 bytes inside a block of size 224 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 8
==4450== at 0xA20F2C6: krb5_cc_get_principal (cache.c:748)
==4450== by 0xA20FE05: build_conf_principals (cache.c:1226)
==4450== by 0xA21011A: krb5_cc_get_config (cache.c:1347)
==4450== by 0x956EC06: init_auth_restart (init_sec_context.c:628)
==4450== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== Address 0x26a8ac50 is 0 bytes inside a block of size 24 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0xA20F182: krb5_cc_close (cache.c:666)
==4450== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
==4450== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==4450== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 8
==4450== at 0xA236F18: mcc_get_principal (mcache.c:270)
==4450== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
==4450== by 0xA20FE05: build_conf_principals (cache.c:1226)
==4450== by 0xA21011A: krb5_cc_get_config (cache.c:1347)
==4450== by 0x956EC06: init_auth_restart (init_sec_context.c:628)
==4450== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== Address 0x26a8ac60 is 16 bytes inside a block of size 24 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0xA20F182: krb5_cc_close (cache.c:666)
==4450== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
==4450== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==4450== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 4
==4450== at 0xA236F24: mcc_get_principal (mcache.c:272)
==4450== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
==4450== by 0xA20FE05: build_conf_principals (cache.c:1226)
==4450== by 0xA21011A: krb5_cc_get_config (cache.c:1347)
==4450== by 0x956EC06: init_auth_restart (init_sec_context.c:628)
==4450== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==4450== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== Address 0x24f01e1c is 12 bytes inside a block of size 56 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0xA21DF11: krb5_data_free (data.c:66)
==4450== by 0xA236C3C: mcc_close (mcache.c:189)
==4450== by 0xA20F173: krb5_cc_close (cache.c:665)
==4450== by 0xA20F143: krb5_cc_destroy (cache.c:647)
==4450== by 0x5491FA6: free_mccache (credentials_krb5.c:127)
==4450== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450==
==4450== Invalid write of size 8
==4450== at 0x9587EE7: gss_init_sec_context (gss_init_sec_context.c:208)
==4450== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==4450== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==4450== by 0xB8002CC: composite_done (composite.c:143)
==4450== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==4450== Address 0x24d8ab40 is 80 bytes inside a block of size 224 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid write of size 8
==4450== at 0x613BB3E: gensec_gssapi_update (gensec_gssapi.c:478)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==4450== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==4450== by 0xB8002CC: composite_done (composite.c:143)
==4450== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==4450== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==4450== Address 0x24d8ab78 is 136 bytes inside a block of size 224 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 4
==4450== at 0x613BC67: gensec_gssapi_update (gensec_gssapi.c:516)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==4450== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==4450== by 0xB8002CC: composite_done (composite.c:143)
==4450== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==4450== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==4450== Address 0x24d8abb8 is 200 bytes inside a block of size 224 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid write of size 4
==4450== at 0x613BC71: gensec_gssapi_update (gensec_gssapi.c:516)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==4450== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==4450== by 0xB8002CC: composite_done (composite.c:143)
==4450== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==4450== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==4450== Address 0x24d8abb8 is 200 bytes inside a block of size 224 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 4
==4450== at 0x67A0033: talloc_chunk_from_ptr (talloc.c:349)
==4450== by 0x67A0368: __talloc (talloc.c:556)
==4450== by 0x67A074A: _talloc_named_const (talloc.c:676)
==4450== by 0x67A2F14: _talloc_memdup (talloc.c:1910)
==4450== by 0x635FED0: data_blob_talloc_named (data_blob.c:52)
==4450== by 0x613BF81: gensec_gssapi_update (gensec_gssapi.c:550)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== Address 0x24c354a0 is 64 bytes inside a block of size 184 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 4
==4450== at 0x67A004D: talloc_chunk_from_ptr (talloc.c:355)
==4450== by 0x67A0368: __talloc (talloc.c:556)
==4450== by 0x67A074A: _talloc_named_const (talloc.c:676)
==4450== by 0x67A2F14: _talloc_memdup (talloc.c:1910)
==4450== by 0x635FED0: data_blob_talloc_named (data_blob.c:52)
==4450== by 0x613BF81: gensec_gssapi_update (gensec_gssapi.c:550)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== Address 0x24c354a0 is 64 bytes inside a block of size 184 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
==4450== Invalid read of size 8
==4450== at 0x67A005B: talloc_chunk_from_ptr (talloc.c:356)
==4450== by 0x67A0368: __talloc (talloc.c:556)
==4450== by 0x67A074A: _talloc_named_const (talloc.c:676)
==4450== by 0x67A2F14: _talloc_memdup (talloc.c:1910)
==4450== by 0x635FED0: data_blob_talloc_named (data_blob.c:52)
==4450== by 0x613BF81: gensec_gssapi_update (gensec_gssapi.c:550)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==4450== by 0x6133891: gensec_spnego_update (spnego.c:842)
==4450== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==4450== by 0x61354B5: gensec_update (gensec.c:220)
==4450== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==4450== Address 0x24c35490 is 48 bytes inside a block of size 184 free'd
==4450== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==4450== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==4450== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==4450==
talloc: access after free error - first free may be at ../source4/smbd/service_stream.c:82
Bad talloc magic value - access after free
smb_panic(): calling panic action [/usr/bin/screen -d -m /etc/nolteinfosysteme/tsamba4restart.cron]
smb_panic(): action returned status 0
PANIC: Bad talloc magic value - access after free
==4450==
==4450== HEAP SUMMARY:
==4450== in use at exit: 6,774,152 bytes in 59,826 blocks
==4450== total heap usage: 3,298,796 allocs, 3,238,970 frees, 483,059,421 bytes allocated
==4450==
==4450== LEAK SUMMARY:
==4450== definitely lost: 184 bytes in 3 blocks
==4450== indirectly lost: 2,222 bytes in 42 blocks
==4450== possibly lost: 135,341 bytes in 1,214 blocks
==4450== still reachable: 6,636,405 bytes in 58,567 blocks
==4450== suppressed: 0 bytes in 0 blocks
==4450== Rerun with --leak-check=full to see details of leaked memory
==4450==
==4450== For counts of detected and suppressed errors, rerun with: -v
==4450== ERROR SUMMARY: 18 errors from 18 contexts (suppressed: 2 from 2)

Mit freundlichen Grüßen
Thomas Nolte
--
Nolte Infosysteme, Im Sikfeld 8, 38304 Wolfenbuettel
Tel 05331-946210, Fax 05331-946211, Handy 0170-5508198

Computer, Netzwerk, Kommunikation www.nisx.de

-----Ursprüngliche Nachricht-----

[...]

Can you try that again with:

valgrind samba -i -M single > out 2>&1

[...]

Andrew Bartlett

unread,

Apr 26, 2013, 6:00:02 PM4/26/13

On Fri, 2013-04-26 at 19:47 +0200, sa...@nisx.de wrote:
> Hi,
>

> same problem here:

We need to know where that free is coming from, can you add
--num-callers=64?

valgrind --num-callers=64 samba -i -M single > out 2>&1

Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org

François Lafont

unread,

Apr 26, 2013, 6:50:01 PM4/26/13

Hi,

Le 26/04/2013 11:38, Andrew Bartlett a écrit :

> Can you try that again with:
>
> valgrind samba -i -M single > out 2>&1
>
> I'm not worried about memory leaks (they don't cause crashes), and
> missing the '-' in front of -M probably means you didn't get the crash
> in the log you gave.

Oops, sorry.

It's very strange, with your command, there is no problem in the log. I have tried this:

~# valgrind samba -i -M single > out 2>&1

During, the execution of samba, I have done this in another shell:

-----------------------------------------

~# wbinfo -u
Administrator
Guest
krbtgt
test1

~# ls -l /usr/local/samba/var/locks/sysvol/ # 1 minute'wait
total 8
drwxrws---+ 4 root 3000000 4096 Apr 21 13:00 chezmoi.priv

~# wbinfo -u

Error looking up domain users

-----------------------------------------

And here my "out" file:

-----------------------------------------
==2377== Memcheck, a memory error detector
==2377== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==2377== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==2377== Command: samba -i -M single
==2377==

samba version 4.0.5 started.
Copyright Andrew Tridgell and the Samba Team 1992-2012
samba: using 'single' process model

==2377==
==2377== HEAP SUMMARY:
==2377== in use at exit: 4,601,429 bytes in 36,998 blocks
==2377== total heap usage: 696,172 allocs, 659,174 frees, 113,032,156 bytes allocated
==2377==
==2377== LEAK SUMMARY:
==2377== definitely lost: 0 bytes in 0 blocks
==2377== indirectly lost: 0 bytes in 0 blocks
==2377== possibly lost: 4,283,837 bytes in 35,214 blocks
==2377== still reachable: 317,592 bytes in 1,784 blocks
==2377== suppressed: 0 bytes in 0 blocks
==2377== Rerun with --leak-check=full to see details of leaked memory
==2377==
==2377== For counts of detected and suppressed errors, rerun with: -v
==2377== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 285 from 8)
-----------------------------------------

No problem ! It's very curious. I hope that we would more information with the thomas'log...

--
François Lafont

Andrew Bartlett

unread,

Apr 28, 2013, 5:30:01 AM4/28/13

On Sat, 2013-04-27 at 14:50 +0200, sa...@nisx.de wrote:
> Hi,
>
> no problem but max --num-callers is 50.

Thanks, this gives me enough detail.

It won't be trivial to fix (we have been plagued by some similar issues
for some time), but at least it is now clear what is going on.

> root@leela:~# valgrind --num-callers=64 samba -i -M single
> valgrind: Bad option: --num-callers=64
> valgrind: '--num-callers' argument must be between 1 and 50
>
> So this came when I execute ' getent group':
>
> root@leela:~# valgrind --num-callers=50 /opt/samba/sbin/samba -i -M single > out 2>&1
> root@leela:~# cat out
> ==1970== Memcheck, a memory error detector
> ==1970== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
> ==1970== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
> ==1970== Command: /opt/samba/sbin/samba -i -M single
> ==1970==

> samba version 4.0.5 started.
> Copyright Andrew Tridgell and the Samba Team 1992-2012
> samba: using 'single' process model

> /opt/samba/sbin/smbd: sh: Zeile 0: test: Zu viele Argumente.
> /opt/samba/sbin/smbd: sh: Zeile 0: test: Zu viele Argumente.

> ==1970== Invalid read of size 4
> ==1970== at 0x198B294C: cmd_setgrent_recv_group_list (wb_cmd_setgrent.c:143)
> ==1970== by 0xB8002CC: composite_done (composite.c:143)
> ==1970== by 0x19AEE2C6: continue_groups_enumerated (libnet_group.c:682)
> ==1970== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==1970== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==1970== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==1970== by 0xE3D0F25: dcerpc_samr_EnumDomainGroups_r_done (ndr_samr_c.c:2462)
> ==1970== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==1970== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==1970== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==1970== by 0x897E0F0: dcerpc_binding_handle_call_done (binding_handle.c:492)
> ==1970== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==1970== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==1970== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==1970== by 0x897D5D8: dcerpc_binding_handle_raw_call_done (binding_handle.c:163)
> ==1970== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==1970== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==1970== by 0x6592A22: tevent_req_trigger (tevent_req.c:166)
> ==1970== by 0x6591E37: tevent_common_loop_immediate (tevent_immediate.c:135)
> ==1970== by 0x6599A55: epoll_event_loop_once (tevent_epoll.c:912)
> ==1970== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==1970== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==1970== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==1970== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==1970== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==1970== by 0x40B590: binary_smbd_main (server.c:486)
> ==1970== by 0x40B5D6: main (server.c:497)
> ==1970== Address 0x2715de24 is 100 bytes inside a block of size 120 free'd
> ==1970== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==1970== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
> ==1970== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==1970== by 0x198B28C0: cmd_setgrent_recv_group_list (wb_cmd_setgrent.c:133)
> ==1970== by 0xB8002CC: composite_done (composite.c:143)
> ==1970== by 0x19AEE2C6: continue_groups_enumerated (libnet_group.c:682)
> ==1970== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==1970== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==1970== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==1970== by 0xE3D0F25: dcerpc_samr_EnumDomainGroups_r_done (ndr_samr_c.c:2462)
> ==1970== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==1970== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==1970== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==1970== by 0x897E0F0: dcerpc_binding_handle_call_done (binding_handle.c:492)
> ==1970== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==1970== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==1970== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==1970== by 0x897D5D8: dcerpc_binding_handle_raw_call_done (binding_handle.c:163)
> ==1970== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==1970== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==1970== by 0x6592A22: tevent_req_trigger (tevent_req.c:166)
> ==1970== by 0x6591E37: tevent_common_loop_immediate (tevent_immediate.c:135)
> ==1970== by 0x6599A55: epoll_event_loop_once (tevent_epoll.c:912)
> ==1970== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==1970== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==1970== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==1970== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==1970== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==1970== by 0x40B590: binary_smbd_main (server.c:486)
> ==1970== by 0x40B5D6: main (server.c:497)
> ==1970==
> ==1970==
> ==1970== HEAP SUMMARY:
> ==1970== in use at exit: 7,731,815 bytes in 68,293 blocks
> ==1970== total heap usage: 4,137,801 allocs, 4,069,508 frees, 587,838,662 bytes allocated
> ==1970==
> ==1970== LEAK SUMMARY:
> ==1970== definitely lost: 0 bytes in 0 blocks
> ==1970== indirectly lost: 0 bytes in 0 blocks
> ==1970== possibly lost: 126,722 bytes in 1,160 blocks
> ==1970== still reachable: 7,605,093 bytes in 67,133 blocks
> ==1970== suppressed: 0 bytes in 0 blocks
> ==1970== Rerun with --leak-check=full to see details of leaked memory
> ==1970==
> ==1970== For counts of detected and suppressed errors, rerun with: -v
> ==1970== ERROR SUMMARY: 7 errors from 1 contexts (suppressed: 2 from 2)
>
> And this on ' ll /opt/samba/var/locks/sysvol/':
>
> root@leela:~# valgrind --num-callers=50 /opt/samba/sbin/samba -i -M single > out 2>&1
> root@leela:~# cat out
> ==2165== Memcheck, a memory error detector
> ==2165== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
> ==2165== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
> ==2165== Command: /opt/samba/sbin/samba -i -M single
> ==2165==

> samba version 4.0.5 started.
> Copyright Andrew Tridgell and the Samba Team 1992-2012
> samba: using 'single' process model

> /opt/samba/sbin/smbd: sh: Zeile 0: test: Zu viele Argumente.
> /opt/samba/sbin/smbd: sh: Zeile 0: test: Zu viele Argumente.

> ==2165== Invalid read of size 8
> ==2165== at 0xA20F1A0: krb5_cc_store_cred (cache.c:684)
> ==2165== by 0xA22487A: krb5_get_credentials_with_flags (get_cred.c:1207)
> ==2165== by 0xA2248C5: krb5_get_credentials (get_cred.c:1220)
> ==2165== by 0x956E1B7: gsskrb5_get_creds (init_sec_context.c:246)
> ==2165== by 0x956E73D: init_auth (init_sec_context.c:455)
> ==2165== by 0x956F52F: _gsskrb5_init_sec_context (init_sec_context.c:942)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x2572eb50 is 0 bytes inside a block of size 24 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0xA20F182: krb5_cc_close (cache.c:666)
> ==2165== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
> ==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
> ==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165==
> ==2165== Invalid read of size 8
> ==2165== at 0xA236D90: mcc_store_cred (mcache.c:239)
> ==2165== by 0xA20F1BB: krb5_cc_store_cred (cache.c:684)
> ==2165== by 0xA22487A: krb5_get_credentials_with_flags (get_cred.c:1207)
> ==2165== by 0xA2248C5: krb5_get_credentials (get_cred.c:1220)
> ==2165== by 0x956E1B7: gsskrb5_get_creds (init_sec_context.c:246)
> ==2165== by 0x956E73D: init_auth (init_sec_context.c:455)
> ==2165== by 0x956F52F: _gsskrb5_init_sec_context (init_sec_context.c:942)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x2572eb60 is 16 bytes inside a block of size 24 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0xA20F182: krb5_cc_close (cache.c:666)
> ==2165== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
> ==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
> ==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165==
> ==2165== Invalid read of size 4
> ==2165== at 0xA236D9C: mcc_store_cred (mcache.c:243)
> ==2165== by 0xA20F1BB: krb5_cc_store_cred (cache.c:684)
> ==2165== by 0xA22487A: krb5_get_credentials_with_flags (get_cred.c:1207)
> ==2165== by 0xA2248C5: krb5_get_credentials (get_cred.c:1220)
> ==2165== by 0x956E1B7: gsskrb5_get_creds (init_sec_context.c:246)
> ==2165== by 0x956E73D: init_auth (init_sec_context.c:455)
> ==2165== by 0x956F52F: _gsskrb5_init_sec_context (init_sec_context.c:942)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x1155902c is 12 bytes inside a block of size 56 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0xA21DF11: krb5_data_free (data.c:66)
> ==2165== by 0xA236C3C: mcc_close (mcache.c:189)
> ==2165== by 0xA20F173: krb5_cc_close (cache.c:665)
> ==2165== by 0xA20F143: krb5_cc_destroy (cache.c:647)
> ==2165== by 0x5491FA6: free_mccache (credentials_krb5.c:127)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165==
> ==2165== Invalid read of size 8
> ==2165== at 0xA20F2C6: krb5_cc_get_principal (cache.c:748)
> ==2165== by 0x956E3FA: do_delegation (init_sec_context.c:328)
> ==2165== by 0x956EA54: init_auth_restart (init_sec_context.c:571)
> ==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x2572eb50 is 0 bytes inside a block of size 24 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0xA20F182: krb5_cc_close (cache.c:666)
> ==2165== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
> ==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
> ==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165==
> ==2165== Invalid read of size 8
> ==2165== at 0xA236F18: mcc_get_principal (mcache.c:270)
> ==2165== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
> ==2165== by 0x956E3FA: do_delegation (init_sec_context.c:328)
> ==2165== by 0x956EA54: init_auth_restart (init_sec_context.c:571)
> ==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x2572eb60 is 16 bytes inside a block of size 24 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0xA20F182: krb5_cc_close (cache.c:666)
> ==2165== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
> ==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
> ==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165==
> ==2165== Invalid read of size 4
> ==2165== at 0xA236F24: mcc_get_principal (mcache.c:272)
> ==2165== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
> ==2165== by 0x956E3FA: do_delegation (init_sec_context.c:328)
> ==2165== by 0x956EA54: init_auth_restart (init_sec_context.c:571)
> ==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x1155902c is 12 bytes inside a block of size 56 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0xA21DF11: krb5_data_free (data.c:66)
> ==2165== by 0xA236C3C: mcc_close (mcache.c:189)
> ==2165== by 0xA20F173: krb5_cc_close (cache.c:665)
> ==2165== by 0xA20F143: krb5_cc_destroy (cache.c:647)
> ==2165== by 0x5491FA6: free_mccache (credentials_krb5.c:127)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165==
> ==2165== Invalid read of size 4
> ==2165== at 0x956EB26: init_auth_restart (init_sec_context.c:606)
> ==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x255d1718 is 8 bytes inside a block of size 64 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0x957E5FA: _gsskrb5_release_cred (release_cred.c:73)
> ==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
> ==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165==
> ==2165== Invalid write of size 4
> ==2165== at 0x956EB59: init_auth_restart (init_sec_context.c:613)
> ==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x114d63ac is 108 bytes inside a block of size 224 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165==
> ==2165== Invalid read of size 8
> ==2165== at 0xA20F2C6: krb5_cc_get_principal (cache.c:748)
> ==2165== by 0xA20FE05: build_conf_principals (cache.c:1226)
> ==2165== by 0xA21011A: krb5_cc_get_config (cache.c:1347)
> ==2165== by 0x956EC06: init_auth_restart (init_sec_context.c:628)
> ==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x2572eb50 is 0 bytes inside a block of size 24 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0xA20F182: krb5_cc_close (cache.c:666)
> ==2165== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
> ==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
> ==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165==
> ==2165== Invalid read of size 8
> ==2165== at 0xA236F18: mcc_get_principal (mcache.c:270)
> ==2165== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
> ==2165== by 0xA20FE05: build_conf_principals (cache.c:1226)
> ==2165== by 0xA21011A: krb5_cc_get_config (cache.c:1347)
> ==2165== by 0x956EC06: init_auth_restart (init_sec_context.c:628)
> ==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x2572eb60 is 16 bytes inside a block of size 24 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0xA20F182: krb5_cc_close (cache.c:666)
> ==2165== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
> ==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
> ==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165==
> ==2165== Invalid read of size 4
> ==2165== at 0xA236F24: mcc_get_principal (mcache.c:272)
> ==2165== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
> ==2165== by 0xA20FE05: build_conf_principals (cache.c:1226)
> ==2165== by 0xA21011A: krb5_cc_get_config (cache.c:1347)
> ==2165== by 0x956EC06: init_auth_restart (init_sec_context.c:628)
> ==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
> ==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x1155902c is 12 bytes inside a block of size 56 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0xA21DF11: krb5_data_free (data.c:66)
> ==2165== by 0xA236C3C: mcc_close (mcache.c:189)
> ==2165== by 0xA20F173: krb5_cc_close (cache.c:665)
> ==2165== by 0xA20F143: krb5_cc_destroy (cache.c:647)
> ==2165== by 0x5491FA6: free_mccache (credentials_krb5.c:127)
> ==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165==
> ==2165== Invalid write of size 8
> ==2165== at 0x9587EE7: gss_init_sec_context (gss_init_sec_context.c:208)
> ==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x114d6390 is 80 bytes inside a block of size 224 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165==
> ==2165== Invalid write of size 8
> ==2165== at 0x613BB3E: gensec_gssapi_update (gensec_gssapi.c:478)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x114d63c8 is 136 bytes inside a block of size 224 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165==
> ==2165== Invalid read of size 4
> ==2165== at 0x613BC67: gensec_gssapi_update (gensec_gssapi.c:516)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x114d6408 is 200 bytes inside a block of size 224 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165==
> ==2165== Invalid write of size 4
> ==2165== at 0x613BC71: gensec_gssapi_update (gensec_gssapi.c:516)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x114d6408 is 200 bytes inside a block of size 224 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165==
> ==2165== Invalid read of size 4
> ==2165== at 0x67A0033: talloc_chunk_from_ptr (talloc.c:349)
> ==2165== by 0x67A0368: __talloc (talloc.c:556)
> ==2165== by 0x67A074A: _talloc_named_const (talloc.c:676)
> ==2165== by 0x67A2F14: _talloc_memdup (talloc.c:1910)
> ==2165== by 0x635FED0: data_blob_talloc_named (data_blob.c:52)
> ==2165== by 0x613BF81: gensec_gssapi_update (gensec_gssapi.c:550)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x25f07950 is 64 bytes inside a block of size 184 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165==
> ==2165== Invalid read of size 4
> ==2165== at 0x67A004D: talloc_chunk_from_ptr (talloc.c:355)
> ==2165== by 0x67A0368: __talloc (talloc.c:556)
> ==2165== by 0x67A074A: _talloc_named_const (talloc.c:676)
> ==2165== by 0x67A2F14: _talloc_memdup (talloc.c:1910)
> ==2165== by 0x635FED0: data_blob_talloc_named (data_blob.c:52)
> ==2165== by 0x613BF81: gensec_gssapi_update (gensec_gssapi.c:550)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x25f07950 is 64 bytes inside a block of size 184 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165==
> ==2165== Invalid read of size 8
> ==2165== at 0x67A005B: talloc_chunk_from_ptr (talloc.c:356)
> ==2165== by 0x67A0368: __talloc (talloc.c:556)
> ==2165== by 0x67A074A: _talloc_named_const (talloc.c:676)
> ==2165== by 0x67A2F14: _talloc_memdup (talloc.c:1910)
> ==2165== by 0x635FED0: data_blob_talloc_named (data_blob.c:52)
> ==2165== by 0x613BF81: gensec_gssapi_update (gensec_gssapi.c:550)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
> ==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
> ==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
> ==2165== by 0x61354B5: gensec_update (gensec.c:220)
> ==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
> ==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
> ==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
> ==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
> ==2165== by 0xB8002CC: composite_done (composite.c:143)
> ==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
> ==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
> ==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
> ==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
> ==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
> ==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
> ==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
> ==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
> ==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
> ==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
> ==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
> ==2165== by 0x40B590: binary_smbd_main (server.c:486)
> ==2165== by 0x40B5D6: main (server.c:497)
> ==2165== Address 0x25f07940 is 48 bytes inside a block of size 184 free'd
> ==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
> ==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
> ==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
> ==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
> ==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
> ==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
> ==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
> ==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
> ==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
> ==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
> ==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
> ==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
> ==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
> ==2165==

> talloc: access after free error - first free may be at ../source4/smbd/service_stream.c:82
> Bad talloc magic value - access after free
> smb_panic(): calling panic action [/usr/bin/screen -d -m /etc/nolteinfosysteme/tsamba4restart.cron]
> smb_panic(): action returned status 0
> PANIC: Bad talloc magic value - access after free

> ==2165==
> ==2165== HEAP SUMMARY:
> ==2165== in use at exit: 4,753,311 bytes in 40,174 blocks
> ==2165== total heap usage: 808,049 allocs, 767,875 frees, 129,676,034 bytes allocated
> ==2165==
> ==2165== LEAK SUMMARY:
> ==2165== definitely lost: 76 bytes in 2 blocks
> ==2165== indirectly lost: 2,222 bytes in 42 blocks
> ==2165== possibly lost: 135,341 bytes in 1,214 blocks
> ==2165== still reachable: 4,615,672 bytes in 38,916 blocks
> ==2165== suppressed: 0 bytes in 0 blocks
> ==2165== Rerun with --leak-check=full to see details of leaked memory
> ==2165==
> ==2165== For counts of detected and suppressed errors, rerun with: -v
> ==2165== ERROR SUMMARY: 18 errors from 18 contexts (suppressed: 2 from 2)

>
> Mit freundlichen Grüßen
> Thomas Nolte
> --
> Nolte Infosysteme, Im Sikfeld 8, 38304 Wolfenbuettel
> Tel 05331-946210, Fax 05331-946211, Handy 0170-5508198
>
> Computer, Netzwerk, Kommunikation www.nisx.de
>
> -----Ursprüngliche Nachricht-----

> Von: Andrew Bartlett [mailto:abar...@samba.org]
> Gesendet: Freitag, 26. April 2013 23:59
> An: Thomas Nolte
> Cc: sa...@lists.samba.org
> Betreff: Re: AW: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

>
> On Fri, 2013-04-26 at 19:47 +0200, sa...@nisx.de wrote:
> > Hi,
> >
> > same problem here:
>
> We need to know where that free is coming from, can you add --num-callers=64?
>
> eg
>

> valgrind --num-callers=64 samba -i -M single > out 2>&1
>
> [...]
>

--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org

Philippe...@swisscom.com

unread,

Apr 29, 2013, 5:40:01 AM4/29/13

Hi all,

just as info, i also have the same crash with debian wheezy and samba 4.0.5, by just doing
wbinfo --uid-info 3000000 and also only when the nssswitch.conf have "compat winbind"

but i didn't have this crash with 4.0.4, in this case NO problem.

best regards
philippe

Michael Wood

unread,

Apr 29, 2013, 6:30:01 AM4/29/13

If you have the time to track this down, it might be worth doing a git
bisect. It will require compiling samba about 7 times and testing
each one.

Basically you clone the samba repository (as per the Samba 4 HOWTO on
the wiki) and then:

1.) $ git bisect start samba-4.0.5 samba-4.0.4
2.) Compile samba as normal and test the result.
3.) If it fails, run "git bisect bad". If it works properly, run "git
bisect good".
4.) If git tells you it's found the bad commit, report that here.
Otherwise it will tell you roughly how many steps are left and what
commit you are on now, in which case, go back to step 2.

When git bisect tells you the bad commit, you can report that here and
it might help the Samba developers to find the problem more easily.

To get your git tree back to where it was before starting the bisect,
do "git bisect reset".

--
Michael Wood <esio...@gmail.com>

philippe.simonet

unread,

Apr 29, 2013, 11:30:02 PM4/29/13

Hi all,

just as info, i can reproduce this crash with debian wheezy with 4.0.5, by

just doing
wbinfo --uid-info 3000000

and only when the nssswitch.conf have "compat winbind"

i didn't have this crash with 4.0.4.

best regards
philippe

--
View this message in context: http://samba.2283325.n4.nabble.com/samba4-crash-of-winbind-after-ls-l-usr-local-samba-var-locks-sysvol-tp4646715p4647257.html
Sent from the Samba - General mailing list archive at Nabble.com.

sa...@nisx.de

unread,

Apr 29, 2013, 11:30:01 PM4/29/13

Hi,

no problem but max --num-callers is 50.

root@leela:~# valgrind --num-callers=64 samba -i -M single

valgrind: Bad option: --num-callers=64
valgrind: '--num-callers' argument must be between 1 and 50

So this came when I execute ' getent group':

root@leela:~# valgrind --num-callers=50 /opt/samba/sbin/samba -i -M single > out 2>&1
root@leela:~# cat out
==1970== Memcheck, a memory error detector
==1970== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==1970== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info

==1970== Command: /opt/samba/sbin/samba -i -M single
==1970==

samba version 4.0.5 started.
Copyright Andrew Tridgell and the Samba Team 1992-2012
samba: using 'single' process model
/opt/samba/sbin/smbd: sh: Zeile 0: test: Zu viele Argumente.
/opt/samba/sbin/smbd: sh: Zeile 0: test: Zu viele Argumente.

==1970== Invalid read of size 4

==1970== at 0x198B294C: cmd_setgrent_recv_group_list (wb_cmd_setgrent.c:143)

==1970== by 0xB8002CC: composite_done (composite.c:143)

==1970== Address 0x2715de24 is 100 bytes inside a block of size 120 free'd
==1970== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1970== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)

==1970== by 0x67A1FF8: _talloc_free (talloc.c:1371)
==1970== by 0x198B28C0: cmd_setgrent_recv_group_list (wb_cmd_setgrent.c:133)

==1970== by 0xB8002CC: composite_done (composite.c:143)

==1970== definitely lost: 0 bytes in 0 blocks
==1970== indirectly lost: 0 bytes in 0 blocks

==1970== possibly lost: 126,722 bytes in 1,160 blocks
==1970== still reachable: 7,605,093 bytes in 67,133 blocks

==1970== suppressed: 0 bytes in 0 blocks
==1970== Rerun with --leak-check=full to see details of leaked memory
==1970==
==1970== For counts of detected and suppressed errors, rerun with: -v
==1970== ERROR SUMMARY: 7 errors from 1 contexts (suppressed: 2 from 2)

And this on ' ll /opt/samba/var/locks/sysvol/':

root@leela:~# valgrind --num-callers=50 /opt/samba/sbin/samba -i -M single > out 2>&1
root@leela:~# cat out
==2165== Memcheck, a memory error detector
==2165== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==2165== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info

==2165== Command: /opt/samba/sbin/samba -i -M single
==2165==

==2165== Invalid read of size 8
==2165== at 0xA20F1A0: krb5_cc_store_cred (cache.c:684)
==2165== by 0xA22487A: krb5_get_credentials_with_flags (get_cred.c:1207)
==2165== by 0xA2248C5: krb5_get_credentials (get_cred.c:1220)
==2165== by 0x956E1B7: gsskrb5_get_creds (init_sec_context.c:246)
==2165== by 0x956E73D: init_auth (init_sec_context.c:455)
==2165== by 0x956F52F: _gsskrb5_init_sec_context (init_sec_context.c:942)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== by 0x76FB3E0: pipe_open_recv (dcerpc_smb.c:571)
==2165== by 0xD079F6E: smbcli_request_done (clitransport.c:449)
==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
==2165== by 0xD2BDCAA: smb1cli_conn_dispatch_incoming (smbXcli_base.c:2021)
==2165== by 0xD2BC774: smbXcli_conn_received (smbXcli_base.c:1581)
==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
==2165== by 0x103A0C60: read_smb_done (read_smb.c:98)
==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
==2165== by 0x659292B: _tevent_req_done (tevent_req.c:116)
==2165== by 0x103A0651: read_packet_handler (async_sock.c:639)
==2165== by 0x65994F1: epoll_event_loop (tevent_epoll.c:736)
==2165== by 0x6599B05: epoll_event_loop_once (tevent_epoll.c:931)
==2165== by 0x659688A: std_event_loop_once (tevent_standard.c:112)
==2165== by 0x6590F4E: _tevent_loop_once (tevent.c:530)
==2165== by 0x65911AE: tevent_common_loop_wait (tevent.c:634)
==2165== by 0x659692C: std_event_loop_wait (tevent_standard.c:138)
==2165== by 0x6591279: _tevent_loop_wait (tevent.c:653)
==2165== by 0x40B590: binary_smbd_main (server.c:486)
==2165== by 0x40B5D6: main (server.c:497)

==2165== Address 0x2572eb50 is 0 bytes inside a block of size 24 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0xA20F182: krb5_cc_close (cache.c:666)
==2165== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

==2165== by 0x67A1FF8: _talloc_free (talloc.c:1371)
==2165== by 0x5D21E58: stream_terminate_connection (service_stream.c:82)
==2165== by 0x1989FD31: wbsrv_terminate_connection (wb_server.c:34)
==2165== by 0x1989FE46: wbsrv_call_loop (wb_server.c:66)
==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
==2165== by 0xB1ECEDC: _tevent_req_nterror (tevent_ntstatus.c:46)
==2165== by 0x5D2391F: tstream_read_pdu_blob_done (tstream.c:110)
==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
==2165== by 0xB806512: tstream_readv_done (tsocket.c:598)
==2165== by 0x65928D2: _tevent_req_notify_callback (tevent_req.c:101)
==2165== by 0x6592904: tevent_req_finish (tevent_req.c:110)
==2165== by 0x6592970: _tevent_req_error (tevent_req.c:128)
==2165== by 0xB80A704: tstream_bsd_readv_handler (tsocket_bsd.c:1749)
==2165== by 0xB809F8D: tstream_bsd_fde_handler (tsocket_bsd.c:1513)
==2165==

==2165== Invalid read of size 8
==2165== at 0xA236D90: mcc_store_cred (mcache.c:239)
==2165== by 0xA20F1BB: krb5_cc_store_cred (cache.c:684)
==2165== by 0xA22487A: krb5_get_credentials_with_flags (get_cred.c:1207)
==2165== by 0xA2248C5: krb5_get_credentials (get_cred.c:1220)
==2165== by 0x956E1B7: gsskrb5_get_creds (init_sec_context.c:246)
==2165== by 0x956E73D: init_auth (init_sec_context.c:455)
==2165== by 0x956F52F: _gsskrb5_init_sec_context (init_sec_context.c:942)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Address 0x2572eb60 is 16 bytes inside a block of size 24 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0xA20F182: krb5_cc_close (cache.c:666)
==2165== by 0x957E52E: _gsskrb5_release_cred (release_cred.c:65)
==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

==2165== Invalid read of size 4
==2165== at 0xA236D9C: mcc_store_cred (mcache.c:243)
==2165== by 0xA20F1BB: krb5_cc_store_cred (cache.c:684)
==2165== by 0xA22487A: krb5_get_credentials_with_flags (get_cred.c:1207)
==2165== by 0xA2248C5: krb5_get_credentials (get_cred.c:1220)
==2165== by 0x956E1B7: gsskrb5_get_creds (init_sec_context.c:246)
==2165== by 0x956E73D: init_auth (init_sec_context.c:455)
==2165== by 0x956F52F: _gsskrb5_init_sec_context (init_sec_context.c:942)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Address 0x1155902c is 12 bytes inside a block of size 56 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0xA21DF11: krb5_data_free (data.c:66)
==2165== by 0xA236C3C: mcc_close (mcache.c:189)
==2165== by 0xA20F173: krb5_cc_close (cache.c:665)
==2165== by 0xA20F143: krb5_cc_destroy (cache.c:647)
==2165== by 0x5491FA6: free_mccache (credentials_krb5.c:127)
==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

==2165== Invalid read of size 8
==2165== at 0xA20F2C6: krb5_cc_get_principal (cache.c:748)
==2165== by 0x956E3FA: do_delegation (init_sec_context.c:328)
==2165== by 0x956EA54: init_auth_restart (init_sec_context.c:571)
==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Invalid read of size 8
==2165== at 0xA236F18: mcc_get_principal (mcache.c:270)
==2165== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
==2165== by 0x956E3FA: do_delegation (init_sec_context.c:328)
==2165== by 0x956EA54: init_auth_restart (init_sec_context.c:571)
==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Invalid read of size 4
==2165== at 0xA236F24: mcc_get_principal (mcache.c:272)
==2165== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
==2165== by 0x956E3FA: do_delegation (init_sec_context.c:328)
==2165== by 0x956EA54: init_auth_restart (init_sec_context.c:571)
==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Invalid read of size 4
==2165== at 0x956EB26: init_auth_restart (init_sec_context.c:606)
==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Address 0x255d1718 is 8 bytes inside a block of size 64 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0x957E5FA: _gsskrb5_release_cred (release_cred.c:73)
==2165== by 0x9586895: gss_release_cred (gss_release_cred.c:65)
==2165== by 0x5492B63: free_gssapi_creds (credentials_krb5.c:443)
==2165== by 0x67A0BA8: _talloc_free_internal (talloc.c:831)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

==2165== Invalid write of size 4
==2165== at 0x956EB59: init_auth_restart (init_sec_context.c:613)
==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Address 0x114d63ac is 108 bytes inside a block of size 224 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

==2165== Invalid read of size 8
==2165== at 0xA20F2C6: krb5_cc_get_principal (cache.c:748)
==2165== by 0xA20FE05: build_conf_principals (cache.c:1226)
==2165== by 0xA21011A: krb5_cc_get_config (cache.c:1347)
==2165== by 0x956EC06: init_auth_restart (init_sec_context.c:628)
==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Invalid read of size 8
==2165== at 0xA236F18: mcc_get_principal (mcache.c:270)
==2165== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
==2165== by 0xA20FE05: build_conf_principals (cache.c:1226)
==2165== by 0xA21011A: krb5_cc_get_config (cache.c:1347)
==2165== by 0x956EC06: init_auth_restart (init_sec_context.c:628)
==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Invalid read of size 4
==2165== at 0xA236F24: mcc_get_principal (mcache.c:272)
==2165== by 0xA20F2E1: krb5_cc_get_principal (cache.c:748)
==2165== by 0xA20FE05: build_conf_principals (cache.c:1226)
==2165== by 0xA21011A: krb5_cc_get_config (cache.c:1347)
==2165== by 0x956EC06: init_auth_restart (init_sec_context.c:628)
==2165== by 0x956F588: _gsskrb5_init_sec_context (init_sec_context.c:959)
==2165== by 0x9587E86: gss_init_sec_context (gss_init_sec_context.c:187)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Invalid write of size 8
==2165== at 0x9587EE7: gss_init_sec_context (gss_init_sec_context.c:208)
==2165== by 0x613BB29: gensec_gssapi_update (gensec_gssapi.c:464)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Address 0x114d6390 is 80 bytes inside a block of size 224 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

==2165== Invalid write of size 8
==2165== at 0x613BB3E: gensec_gssapi_update (gensec_gssapi.c:478)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Address 0x114d63c8 is 136 bytes inside a block of size 224 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

==2165== Invalid read of size 4
==2165== at 0x613BC67: gensec_gssapi_update (gensec_gssapi.c:516)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Address 0x114d6408 is 200 bytes inside a block of size 224 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

==2165== Invalid write of size 4
==2165== at 0x613BC71: gensec_gssapi_update (gensec_gssapi.c:516)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Invalid read of size 4
==2165== at 0x67A0033: talloc_chunk_from_ptr (talloc.c:349)
==2165== by 0x67A0368: __talloc (talloc.c:556)
==2165== by 0x67A074A: _talloc_named_const (talloc.c:676)
==2165== by 0x67A2F14: _talloc_memdup (talloc.c:1910)
==2165== by 0x635FED0: data_blob_talloc_named (data_blob.c:52)
==2165== by 0x613BF81: gensec_gssapi_update (gensec_gssapi.c:550)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Address 0x25f07950 is 64 bytes inside a block of size 184 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

==2165== Invalid read of size 4
==2165== at 0x67A004D: talloc_chunk_from_ptr (talloc.c:355)
==2165== by 0x67A0368: __talloc (talloc.c:556)
==2165== by 0x67A074A: _talloc_named_const (talloc.c:676)
==2165== by 0x67A2F14: _talloc_memdup (talloc.c:1910)
==2165== by 0x635FED0: data_blob_talloc_named (data_blob.c:52)
==2165== by 0x613BF81: gensec_gssapi_update (gensec_gssapi.c:550)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Invalid read of size 8
==2165== at 0x67A005B: talloc_chunk_from_ptr (talloc.c:356)
==2165== by 0x67A0368: __talloc (talloc.c:556)
==2165== by 0x67A074A: _talloc_named_const (talloc.c:676)
==2165== by 0x67A2F14: _talloc_memdup (talloc.c:1910)
==2165== by 0x635FED0: data_blob_talloc_named (data_blob.c:52)
==2165== by 0x613BF81: gensec_gssapi_update (gensec_gssapi.c:550)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x6132E90: gensec_spnego_create_negTokenInit (spnego.c:644)
==2165== by 0x6133891: gensec_spnego_update (spnego.c:842)
==2165== by 0x6134DB1: gensec_spnego_update_wrapper (spnego.c:1311)
==2165== by 0x61354B5: gensec_update (gensec.c:220)
==2165== by 0x76F715E: dcerpc_bind_auth_send (dcerpc_auth.c:372)
==2165== by 0x76F9AF5: dcerpc_pipe_auth_send (dcerpc_util.c:621)
==2165== by 0x770022E: dcerpc_secondary_auth_connection_bind (dcerpc_secondary.c:299)
==2165== by 0xB8002CC: composite_done (composite.c:143)
==2165== by 0x76FFF87: continue_pipe_open (dcerpc_secondary.c:191)
==2165== by 0x76FFE10: continue_open_smb (dcerpc_secondary.c:140)
==2165== by 0xB8002CC: composite_done (composite.c:143)

==2165== Address 0x25f07940 is 48 bytes inside a block of size 184 free'd
==2165== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==2165== by 0x67A0E9A: _talloc_free_internal (talloc.c:878)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)
==2165== by 0x67A1BFF: _talloc_free_children_internal (talloc.c:1256)
==2165== by 0x67A0D4B: _talloc_free_internal (talloc.c:851)

talloc: access after free error - first free may be at ../source4/smbd/service_stream.c:82
Bad talloc magic value - access after free
smb_panic(): calling panic action [/usr/bin/screen -d -m /etc/nolteinfosysteme/tsamba4restart.cron]
smb_panic(): action returned status 0
PANIC: Bad talloc magic value - access after free

==2165==
==2165== HEAP SUMMARY:
==2165== in use at exit: 4,753,311 bytes in 40,174 blocks
==2165== total heap usage: 808,049 allocs, 767,875 frees, 129,676,034 bytes allocated
==2165==
==2165== LEAK SUMMARY:
==2165== definitely lost: 76 bytes in 2 blocks

==2165== indirectly lost: 2,222 bytes in 42 blocks
==2165== possibly lost: 135,341 bytes in 1,214 blocks

==2165== still reachable: 4,615,672 bytes in 38,916 blocks

==2165== suppressed: 0 bytes in 0 blocks
==2165== Rerun with --leak-check=full to see details of leaked memory
==2165==
==2165== For counts of detected and suppressed errors, rerun with: -v
==2165== ERROR SUMMARY: 18 errors from 18 contexts (suppressed: 2 from 2)

Von: Andrew Bartlett [mailto:abar...@samba.org]
Gesendet: Freitag, 26. April 2013 23:59
An: Thomas Nolte
Cc: sa...@lists.samba.org
Betreff: Re: AW: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

On Fri, 2013-04-26 at 19:47 +0200, sa...@nisx.de wrote:
> Hi,
>
> same problem here:

We need to know where that free is coming from, can you add --num-callers=64?

eg

valgrind --num-callers=64 samba -i -M single > out 2>&1

Philippe...@swisscom.com

unread,

Apr 30, 2013, 4:40:02 PM4/30/13

Many thanks Michae for your answer,l

here the results of bisect and some samba 'strange' console output.

I hope this can help

best regards

Philippe

-----------------------------------------------------------------------------------------------------
to produce the problem :
-----------------------------------------------------------------------------------------------------
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-fhs
make install
samba -i -M single
wbinfo --uid-info 3000000

-----------------------------------------------------------------------------------------------------
last bisect :
-----------------------------------------------------------------------------------------------------
git bisect good
f77d5d6479c879c8770fbc9a6ca5656ef3e41019 is the first bad commit
commit f77d5d6479c879c8770fbc9a6ca5656ef3e41019
Author: Timur Bakeyev <ti...@FreeBSD.org>
Date: Wed Feb 27 16:25:07 2013 -0800

Fix bug # 9666 - Broken filtering of link-local addresses.

This patch should address the problem with Link Local addresses
on FreeBSD and Linux.

Reviewed-by: Jeremy Allison <j...@samba.org>

Autobuild-User(v4-0-test): Karolin Seeger <kse...@samba.org>
Autobuild-Date(v4-0-test): Fri Mar 1 18:21:19 CET 2013 on sn-devel-104

:040000 040000 e022079ce7298f5cfa9d99e51e7afedb35048b02 164c1aba0559999b0179d3b47f415f6e3e5b3cd7 M lib
-----------------------------------------------------------------------------------------------------

and interesting : the samba console log when the wbinfo is working well is MUCH shorter :

wbinfo ok : -----------------------------------------------------------------------------------------------------
Terminating connection - 'wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED'
single_terminate: reason[wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED]
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
interpret_string_addr_internal: getaddrinfo failed for name (null) (flags 4) [Name or service not known]
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
interpret_addr: host address is invalid for host fe80::5246:5dff:fea3:7167%eth0
Terminating connection - 'wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED'
single_terminate: reason[wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED]

wbinfo doing samba crash :: -----------------------------------------------------------------------------------------------------
Terminating connection - 'wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED'
single_terminate: reason[wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED]
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
interpret_string_addr_internal: getaddrinfo failed for name (null) (flags 4) [Name or service not known]
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
not adding non-broadcast interface tun0
not adding non-broadcast interface tun1
/usr/sbin/smbd: Allowed connection from 192.168.1.113 (192.168.1.113)
/usr/sbin/smbd: init_oplocks: initializing messages.
/usr/sbin/smbd: Transaction 0 of length 194 (0 toread)
/usr/sbin/smbd: switch message SMBnegprot (pid 14995) conn 0x0
/usr/sbin/smbd: Requested protocol [PC NETWORK PROGRAM 1.0]
/usr/sbin/smbd: Requested protocol [MICROSOFT NETWORKS 1.03]
/usr/sbin/smbd: Requested protocol [MICROSOFT NETWORKS 3.0]
/usr/sbin/smbd: Requested protocol [LANMAN1.0]
/usr/sbin/smbd: Requested protocol [LM1.2X002]
/usr/sbin/smbd: Requested protocol [DOS LANMAN2.1]
/usr/sbin/smbd: Requested protocol [LANMAN2.1]
/usr/sbin/smbd: Requested protocol [Samba]
/usr/sbin/smbd: Requested protocol [NT LANMAN 1.0]
/usr/sbin/smbd: Requested protocol [NT LM 0.12]
/usr/sbin/smbd: GENSEC backend 'gssapi_spnego' registered
/usr/sbin/smbd: GENSEC backend 'gssapi_krb5' registered
/usr/sbin/smbd: GENSEC backend 'gssapi_krb5_sasl' registered
/usr/sbin/smbd: GENSEC backend 'schannel' registered
/usr/sbin/smbd: GENSEC backend 'spnego' registered
/usr/sbin/smbd: GENSEC backend 'ntlmssp' registered
/usr/sbin/smbd: GENSEC backend 'krb5' registered
/usr/sbin/smbd: GENSEC backend 'fake_gssapi_krb5' registered
/usr/sbin/smbd: ldb_wrap open of secrets.ldb
/usr/sbin/smbd: AUTH backend 'sam' registered
/usr/sbin/smbd: AUTH backend 'sam_ignoredomain' registered
/usr/sbin/smbd: AUTH backend 'anonymous' registered
/usr/sbin/smbd: AUTH backend 'winbind' registered
/usr/sbin/smbd: AUTH backend 'winbind_wbclient' registered
/usr/sbin/smbd: AUTH backend 'name_to_ntstatus' registered
/usr/sbin/smbd: AUTH backend 'unix' registered
/usr/sbin/smbd: using SPNEGO
/usr/sbin/smbd: Selected protocol NT LANMAN 1.0
Kerberos: AS-REQ GWNOIS03$@TEST.CH from ipv4:192.168.1.113:57556 for krbtgt/TES...@TEST.CH
Kerberos: No preauth found, returning PREAUTH-REQUIRED -- GWNOIS03$@TEST.CH
Kerberos: AS-REQ GWNOIS03$@TEST.CH from ipv4:192.168.1.113:42916 for krbtgt/TES...@TEST.CH
Kerberos: Client sent patypes: encrypted-timestamp
Kerberos: Looking for PKINIT pa-data -- GWNOIS03$@TEST.CH
Kerberos: Looking for ENC-TS pa-data -- GWNOIS03$@TEST.CH
Kerberos: ENC-TS Pre-authentication succeeded -- GWNOIS03$@TEST.CH using arcfour-hmac-md5
Kerberos: AS-REQ authtime: 2013-04-30T22:18:57 starttime: unset endtime: 2013-05-01T08:18:57 renew till: unset
Kerberos: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, des3-cbc-md5, arcfour-hmac-md5, using arcfour-hmac-md5/arcfour-hmac-md5
Kerberos: Requested flags: proxiable, forwardable
Kerberos: TGS-REQ GWNOIS03$@TEST.CH from ipv4:192.168.1.113:53697 for cifs/gwnois03...@TEST.CH [canonicalize]
Kerberos: TGS-REQ authtime: 2013-04-30T22:18:57 starttime: 2013-04-30T22:18:57 endtime: 2013-05-01T08:18:57 renew till: unset
Kerberos: TGS-REQ GWNOIS03$@TEST.CH from ipv4:192.168.1.113:45930 for krbtgt/TES...@TEST.CH [forwarded, forwardable]
Kerberos: TGS-REQ authtime: 2013-04-30T22:18:57 starttime: 2013-04-30T22:18:57 endtime: 2013-05-01T08:18:57 renew till: unset
/usr/sbin/smbd: Transaction 1 of length 2688 (0 toread)
/usr/sbin/smbd: switch message SMBsesssetupX (pid 14995) conn 0x0
/usr/sbin/smbd: wct=12 flg2=0xc803
/usr/sbin/smbd: Doing spnego session setup
/usr/sbin/smbd: NativeOS=[Unix] NativeLanMan=[Samba 4.0.4-GIT-f77d5d6] PrimaryDomain=[TEST]
/usr/sbin/smbd: ldb_wrap open of secrets.ldb
/usr/sbin/smbd: ldb_wrap open of privilege.ldb
Terminating connection - 'wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED'
single_terminate: reason[wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED]
/usr/sbin/smbd: Adding homes service for user 'TEST\GWNOIS03$' using home directory: '/srv1/home/%U'
/usr/sbin/smbd: adding home's share [GWNOIS03$] for user 'TEST\GWNOIS03$' at '/srv1/home/%U'
/usr/sbin/smbd: Transaction 2 of length 102 (0 toread)
/usr/sbin/smbd: switch message SMBtconX (pid 14995) conn 0x0
/usr/sbin/smbd: Allowed connection from 192.168.1.113 (192.168.1.113)
/usr/sbin/smbd: Connect path is '/tmp' for service [IPC$]
/usr/sbin/smbd: Initialising default vfs hooks
/usr/sbin/smbd: Initialising custom vfs hooks from [/[Default VFS]/]
/usr/sbin/smbd: Initialising custom vfs hooks from [acl_xattr]
/usr/sbin/smbd: Module 'acl_xattr' loaded
/usr/sbin/smbd: Initialising custom vfs hooks from [dfs_samba4]
/usr/sbin/smbd: connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$
/usr/sbin/smbd: 192.168.1.113 (ipv4:192.168.1.113:54676) connect to service IPC$ initially as user TEST\GWNOIS03$ (uid=3000022, gid=3000023) (pid 14995)
/usr/sbin/smbd: tconX service=IPC$
/usr/sbin/smbd: Transaction 3 of length 108 (0 toread)
/usr/sbin/smbd: switch message SMBntcreateX (pid 14995) conn 0x2723c70
/usr/sbin/smbd: Transaction 4 of length 160 (0 toread)
/usr/sbin/smbd: switch message SMBtrans (pid 14995) conn 0x2723c70
/usr/sbin/smbd: trans <\PIPE\> data=72 params=0 setup=2
/usr/sbin/smbd: named pipe command on <> name
/usr/sbin/smbd: Got API command 0x26 on pipe "netlogon" (pnum 8102)
/usr/sbin/smbd: Transaction 5 of length 104 (0 toread)
/usr/sbin/smbd: switch message SMBntcreateX (pid 14995) conn 0x2723c70
Terminating connection - 'wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED'
single_terminate: reason[wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED]
Terminating connection - 'wbsrv_samba3_send_reply_done: tstream_writev_queue_recv() - 32:Broken pipe'
single_terminate: reason[wbsrv_samba3_send_reply_done: tstream_writev_queue_recv() - 32:Broken pipe]
Terminating connection - 'NT_STATUS_CONNECTION_DISCONNECTED'
single_terminate: reason[NT_STATUS_CONNECTION_DISCONNECTED]
Terminating connection - 'NT_STATUS_CONNECTION_DISCONNECTED'
single_terminate: reason[NT_STATUS_CONNECTION_DISCONNECTED]
/usr/sbin/smbd: 192.168.1.113 (ipv4:192.168.1.113:54676) closed connection to service IPC$
Kerberos: TGS-REQ GWNOIS03$@TEST.CH from ipv4:192.168.1.113:53290 for host/gwnois03...@TEST.CH [canonicalize]
Kerberos: TGS-REQ authtime: 2013-04-30T22:18:57 starttime: 2013-04-30T22:19:32 endtime: 2013-05-01T08:18:57 renew till: unset
/usr/sbin/smbd: Server exit (failed to receive smb request)
Terminating connection - 'wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED'
single_terminate: reason[wbsrv_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED]
===============================================================
INTERNAL ERROR: Signal 11 in pid 14988 (4.0.4-GIT-f77d5d6)
Please read the Trouble-Shooting section of the Samba HOWTO
===============================================================
PANIC: internal error
Aborted

> -----Original Message-----
> From: Michael Wood [mailto:esio...@gmail.com]
> Sent: Monday, April 29, 2013 12:20 PM
> To: Simonet Philippe, ITS-OUS-OP-IFM-NW-IPE
> Cc: sa...@lists.samba.org
> Subject: Re: [Samba] [samba4] crash of winbind after "ls -l
> /usr/local/samba/var/locks/sysvol"
>

Andrew Bartlett

unread,

Jun 15, 2013, 4:40:02 AM6/15/13

First, I do apologise for the entirely unacceptable delay in dealing
with this issue. I've CC'ed the developers involved in that patch, in
the hope that they might be able to investigate it.

It certainly looks like this is a valid bisect, because when I set:
interfaces = virbr0:0 lo
bind interfaces only = yes

in the smb.conf the crash isn't reproduced, but when I comment this out,
it crashes right away.

I'll continue to look into this myself, as well as following up with
those involved in the change, but I wanted to give you a big thankyou
for doing the bisect, and to say that you clearly are on the right
track.

Thanks,

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org

Jeremy Allison

unread,

Jun 17, 2013, 3:00:02 PM6/17/13

Hmmm. Very strange ! That change prevents link-local and IPv4-compat
addresses being returned in our interface list, otherwise it should
have no effect...

What is the stack backtrace from the crash ?

Jeremy.

Andrew Bartlett

unread,

Jun 17, 2013, 9:50:01 PM6/17/13

It's very odd, and looks like one of those 'butterfly changing the
course of a hurricane' kind of things.
https://bugzilla.samba.org/show_bug.cgi?id=9820 has some more details,
including valgrind work, and attempts to patch it in other ways, but I'm
still quite puzzled as so how this patch fits into it.

This is the #1 crash folks are reporting on the AD DC.

Thanks,

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org

0 new messages