[systemd-bugs] [Bug 83091] systemd-timesyncd segfaults when there's no network (systemd-216)

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=83091

--- Comment #3 from Steven Noonan <steven at uplinklabs.net> ---
Looking a little bit further. It runs through manager_connect without any
issues once. About ten seconds later it calls manager_connect again, and this
time the null deref occurs.

On the second call, server_name_flush_addresses gets called, which ends up
here:

(gdb) bt
#0  manager_set_server_address (m=0x555555577480, a=a at entry=0x0) at
src/timesync/timesyncd-manager.c:758
#1  0x000055555555b4f3 in server_address_free (a=0x555555578bb0) at
src/timesync/timesyncd-server.c:62
#2  0x000055555555b810 in server_name_flush_addresses (n=0x5555555788c0) at
src/timesync/timesyncd-server.c:150
#3  0x00005555555595fe in manager_connect (m=m at entry=0x555555577480) at
src/timesync/timesyncd-manager.c:899
#4  0x000055555555ab0c in manager_timeout (source=<optimized out>,
usec=<optimized out>, userdata=0x555555577480) at
src/timesync/timesyncd-manager.c:158
#5  0x000055555556125d in source_dispatch (s=0x555555579290) at
src/libsystemd/sd-event/sd-event.c:2043
#6  0x0000555555561ad8 in sd_event_run (e=e at entry=0x555555577790,
timeout=<optimized out>, timeout at entry=18446744073709551615) at
src/libsystemd/sd-event/sd-event.c:2333
#7  0x0000555555561bc1 in sd_event_loop (e=0x555555577790) at
src/libsystemd/sd-event/sd-event.c:2352
#8  0x0000555555558639 in main (argc=<optimized out>, argv=<optimized out>) at
src/timesync/timesyncd.c:143

The manager_set_server_address sets m->current_server_name to NULL.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-bugs/attachments/20140830/bc79e0ed/attachment.html>