Samba crashes on statfs call

[rian]

Both samba2 and samba3 smbd crash the handling thread when smbclient is used to list the directory contents.

Windows (at least XP) does not cause the thread to crash.

Security settings of smb.conf do not appear to cause any difference in behaviour.

Reproduceable by setting a standard smb share (default samba template causes this behaviour) and connecting with smbclient (V3.3.0 in testing), and typing 'ls'. Contents are returned as shown below

smb: \> ls

. D 0 Tue Mar 3 17:23:24 2009
.. D 0 Tue Mar 3 17:21:49 2009
place.holder A 3 Tue Mar 3 18:51:10 2009

Receiving SMB: Server stopped responding
Error in dskattr: Call returned zero bytes (EOF)
smb: \>

On smbd, strace -p <thread id> ends with

fcntl64(12, F_SETLKW64,
{type=F_UNLCK, whence=SEEK_SET, start=36244, len=1}, 0x7fe45b70) = 0
write(5, "\0\0\0`\377SMB2\0\0\0\0\210A\300\0\0\0\0\0\0\0\0\0\0\0\0\1\0Fj"..., 100) = 100
_newselect(18, [5 17], NULL, NULL, NULL) = 1 (in [5])
read(5, "\0\0\0#", 4) = 4
read(5, "\377SMB\200\0\0\0\0\10\1\320\0\0\0\0\0\0\0\0\0\0\0\0\1\0Fj\0\0\n\0"..., 35) = 35
statfs(".", <unfinished ...>
+++ killed by SIGSEGV +++

Reproduceable. Latest crash dump attached.

[rian]

Sorry, there is no core produced in /var/log/cores/smb/; thought there was.

[jow]

Milestone Attitude Adjustment 12.09 deleted