bin/144754: cyradm crashes inside libgssapi.so

[Mikhail T.]

>Number:         144754
>Category:       bin
>Synopsis:       cyradm crashes inside libgssapi.so
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Mar 15 04:40:02 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Mikhail T.
>Release:        FreeBSD 8.0-STABLE i386
>Organization:
http://sybpipe.com/
>Environment:
System: FreeBSD tulik.narawntapu 8.0-STABLE FreeBSD 8.0-STABLE #3: Tue Mar  2 19:35:16 EST 2010     root@:/home/obj/usr/src/sys/TULIK  i386

>Description:
	I installed fresh mail/cyrus-imapd23 port and tried to run
	`cyradm' (a perl script delivered by Cyrus).

	This causes perl-executable to dump core. Debugger gives the
	following stack:

	0x28250c65 in free () from /lib/libc.so.7
	(gdb) where
	#0  0x28250c65 in free () from /lib/libc.so.7
	#1  0x28876b82 in gss_release_buffer () from /usr/lib/libgssapi.so.10
	#2  0x28876552 in gss_release_name () from /usr/lib/libgssapi.so.10
	#3  0x28872ea9 in gss_init_sec_context () from /usr/lib/libgssapi.so.10
	#4  0x2886b9d2 in gssapi_client_mech_step () from
	/opt/lib/sasl2/libgssapiv2.so.2
	#5  0x2866a2a3 in sasl_client_step () from /opt/lib/libsasl2.so.2
	#6  0x2866aee5 in sasl_client_start () from /opt/lib/libsasl2.so.2
	#7  0x2850992e in imclient_authenticate () from
	/opt/lib/perl5/site_perl/5.10.1/mach/auto/Cyrus/IMAP/IMAP.so
	#8  0x28505e3e in XS_Cyrus__IMAP__authenticate () from
	/opt/lib/perl5/site_perl/5.10.1/mach/auto/Cyrus/IMAP/IMAP.so
	#9  0x2811883c in Perl_pp_entersub () from
	/opt/lib/perl5/5.10.1/mach/CORE/libperl.so
	#10 0x28116ea5 in Perl_runops_standard () from
	/opt/lib/perl5/5.10.1/mach/CORE/libperl.so
	#11 0x280bf4f4 in perl_run () from
	/opt/lib/perl5/5.10.1/mach/CORE/libperl.so
	#12 0x08048938 in main ()

	Note, that the machine does not have Kerberos configured.

	The problem may be with the sasl2/libgssapiv2.so.2 doing
	something stupid, but our GSS-API should, probably, be
	smarter than freeing something unallocated (a NULL?)

>How-To-Repeat:

>Fix:

	Remove (or bzip2) the Cyrus-installed sasl2/libgssapiv2.so.2 so
	as to exclude from the list of candidates for client-server
	authentication.
>Release-Note:
>Audit-Trail:
>Unformatted: