Mailing List Archive

recent glibc upgrade vs squid/basic_ncsa_auth
After bumping glibc from 2.16 to 2.17, squid auth stopped working. This is
what I can find in the logs. The issue even triggers the fork detection
which kills squid. The symptoms are the same for 3.8.0-hardened-r1 and
3.8.5-hardened.

What else I can do to help diagnose the problem?
Apr 6 23:00:12 kernel: basic_ncsa_auth[2819]: segfault at 0 ip
000003052a8c112a sp 000003e4a06628c8 error 4 in
libc-2.17.so[3052a79f000+1a2000]
Apr 6 23:00:12 atoth kernel: grsec: Segmentation fault occurred at
(nil) in /usr/libexec/squid/basic_ncsa_auth[basic_ncsa_auth:2819]
uid/euid:31/0 gid/egid:31/31, parent /usr/sbin/squid[squid:2818]
uid/euid:31/31 gid/egid:31/31

Thanks:
Dwokfur
--
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, +36-20-825-8057
Re: recent glibc upgrade vs squid/basic_ncsa_auth [ In reply to ]
Update:
I saw another recent report of the issue:
https://bbs.archlinux.org/viewtopic.php?id=158283

And found this commit:
http://pkgs.fedoraproject.org/cgit/squid.git/commit/?id=71ebdc6bb16abe75ff38b7573836d35a20bae880
The patch fixes the issue!

Regards:
Dw.
--
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, +36-20-825-8057

2013.Április 7.(V) 01:34 időpontban "Tóth Attila" ezt írta:
> After bumping glibc from 2.16 to 2.17, squid auth stopped working. This is
> what I can find in the logs. The issue even triggers the fork detection
> which kills squid. The symptoms are the same for 3.8.0-hardened-r1 and
> 3.8.5-hardened.
>
> What else I can do to help diagnose the problem?
> Apr 6 23:00:12 kernel: basic_ncsa_auth[2819]: segfault at 0 ip
> 000003052a8c112a sp 000003e4a06628c8 error 4 in
> libc-2.17.so[3052a79f000+1a2000]
> Apr 6 23:00:12 atoth kernel: grsec: Segmentation fault occurred at
> (nil) in /usr/libexec/squid/basic_ncsa_auth[basic_ncsa_auth:2819]
> uid/euid:31/0 gid/egid:31/31, parent /usr/sbin/squid[squid:2818]
> uid/euid:31/31 gid/egid:31/31
>
> Thanks:
> Dwokfur
> --
> dr Tóth Attila, Radiológus, 06-20-825-8057
> Attila Toth MD, Radiologist, +36-20-825-8057
>
>
>