Bug 60954 - httpd hangup with stack smashing detected
Summary: httpd hangup with stack smashing detected
Status: NEW
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_dbd (show other bugs)
Version: 2.4.6
Hardware: All Linux
: P2 normal (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-04-04 14:03 UTC by gnigro
Modified: 2017-04-04 14:03 UTC (History)
0 users


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description gnigro 2017-04-04 14:03:23 UTC 
Using basic authentication with dbd provider, every request produces an abnormal termination of the apache process:
*** stack smashing detected ***: /usr/sbin/httpd terminated
======= Backtrace: =========
/lib64/libc.so.6(__fortify_fail+0x37)[0x7fd8a74c2047]
/lib64/libc.so.6(__fortify_fail+0x0)[0x7fd8a74c2010]
/usr/lib64/apr-util-1/apr_dbd_odbc-1.so(+0x2d08)[0x7fd899784d08]
/usr/lib64/apr-util-1/apr_dbd_odbc-1.so(+0x4ef4)[0x7fd899786ef4]
/lib64/libaprutil-1.so.0(apr_dbd_pvselect+0x94)[0x7fd8a85f4de4]
/etc/httpd/modules/mod_authn_dbd.so(+0x14aa)[0x7fd8a5d874aa]
/etc/httpd/modules/mod_auth_basic.so(+0x1726)[0x7fd8a659b726]
/usr/sbin/httpd(ap_run_check_user_id+0x40)[0x7fd8a8eea790]
/usr/sbin/httpd(ap_process_request_internal+0x5a2)[0x7fd8a8eed7a2]
/usr/sbin/httpd(ap_process_async_request+0x1f8)[0x7fd8a8f08ba8]
/usr/sbin/httpd(ap_process_request+0x14)[0x7fd8a8f08e94]
/usr/sbin/httpd(+0x507e2)[0x7fd8a8f057e2]
/usr/sbin/httpd(ap_run_process_connection+0x40)[0x7fd8a8efd880]
/etc/httpd/modules/mod_mpm_prefork.so(+0x380f)[0x7fd89f86c80f]
/etc/httpd/modules/mod_mpm_prefork.so(+0x3a55)[0x7fd89f86ca55]
/etc/httpd/modules/mod_mpm_prefork.so(+0x3ab6)[0x7fd89f86cab6]
/etc/httpd/modules/mod_mpm_prefork.so(+0x47c0)[0x7fd89f86d7c0]
/usr/sbin/httpd(ap_run_mpm+0x4e)[0x7fd8a8eda5ae]
/usr/sbin/httpd(main+0xa86)[0x7fd8a8ed3b46]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7fd8a73d4b35]
/usr/sbin/httpd(+0x1ec7f)[0x7fd8a8ed3c7f]

in httpd.conf:
DBDriver odbc
DBDParams "datasource=myodbc,user=myuser,password=mypassword"
DBDPersist On
...
AuthType    Basic
AuthName    "MYYDATABASE REALM"
AuthBasicProvider dbd
AuthDBDUserPWQuery  "SELECT userPassword FROM installazioni WHERE user = '%s'" Require valid-user

in odbc.ini:
[myodbc]
Driver      = /usr/lib64/libtdsodbc.so.0
Description = database mydatabase
Servername  = mydatabase
Database    = IDQUOMAIUS