Bug 36162 - smbd constantly crashes when filename contains non-ascii character
smbd constantly crashes when filename contains non-ascii character
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 3.2
Other Linux
: P5 normal (vote)
: UCS 3.2-3-errata
Assigned To: Arvid Requate
Felix Botner
:
Depends on:
Blocks: 36216
  Show dependency treegraph
 
Reported: 2014-10-13 12:53 CEST by Tim Petersen
Modified: 2014-10-22 16:07 CEST (History)
3 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments
sambabug_10716.patch (6.38 KB, patch)
2014-10-13 13:58 CEST, Arvid Requate
Details | Diff
98_sambabug_10716.patch (7.52 KB, patch)
2014-10-13 14:14 CEST, Arvid Requate
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Tim Petersen univentionstaff 2014-10-13 12:53:07 CEST
Rrported at #2014101321000221

Please see Samba Bug:
https://bugzilla.samba.org/show_bug.cgi?id=10716
Comment 1 Arvid Requate univentionstaff 2014-10-13 13:58:16 CEST
Created attachment 6159 [details]
sambabug_10716.patch

Upstream patch, applies cleanly when split into two parts.
Comment 2 Arvid Requate univentionstaff 2014-10-13 14:14:14 CEST
Created attachment 6160 [details]
98_sambabug_10716.patch

This is the patch as merged into upstream git.
Comment 3 Arvid Requate univentionstaff 2014-10-13 14:33:51 CEST
Advisory: 2014-10-13-samba.yaml
Comment 4 Felix Botner univentionstaff 2014-10-15 12:36:49 CEST
can be reproduced with:

-> cd /home/Administrator/
-> more a.c 
#include <stdio.h>
#include <stdlib.h>
#include <string.h>

int main(int argc, char **argv)
{
        char bad_file[] = {'f', 'i', 'l', 'e', '-', 0xE9, 0};
        FILE *f;

        printf("Create %s\n", bad_file);

        f = fopen(bad_file, "a");
        if (f == NULL)
                perror("fopen");
        else
                fclose(f);

        return 0;
}
-> make a
-> ./a
Create file-�

-> mount.cifs  //10.200.7.50/Administrator \
   -o user=Administrator,pass=univention /mnt/
-> cd /mnt
-> ./a

=>   PANIC (pid 31118): ndr_push_share_mode_lock failed



OK - works with errata3.2-3 and UCS 4.0
OK - YAML
Comment 5 Janek Walkenhorst univentionstaff 2014-10-16 13:42:48 CEST
http://errata.univention.de/ucs/3.2/221.html
Comment 6 Janek Walkenhorst univentionstaff 2014-10-22 16:07:31 CEST
http://errata.univention.de/ucs/3.2/224.html