#2395 SFCB core dumps in indCIMXMLHandler.c:890

[Sarabjit S Saini]

I'm using sfcb-1.3.12-54.ppcnf .

SFCB core dumped while trying to send cim indications.
Here is the stack trace:-

Program terminated with signal 11, Segmentation fault.

#0 0x0f902200 in IndCIMXMLHandlerInvokeMethod (mi=0xf9153f0, ctx=0x10021ca8, rslt=0x10021748, ref=0x10023784,
methodName=0x10023978 "_deliver", in=0x10022400, out=0x10021568) at indCIMXMLHandler.c:890

(gdb) bt
**NOTE: debug frames are hidden in bt display**
#0 0x0f902200 in IndCIMXMLHandlerInvokeMethod (mi=0xf9153f0, ctx=0x10021ca8, rslt=0x10021748, ref=0x10023784, methodName=0x10023978 "_deliver", in=0x10022400, out=0x10021568)
at indCIMXMLHandler.c:890
#1 0x0ff42a84 in invokeMethod (hdr=0x10023718, info=0x10022c60, requestor=-42) at providerDrv.c:1540
#2 0x0ff4c0f8 in processProviderInvocationRequestsThread (prms=0x10022438) at providerDrv.c:2800
#3 0x0fd8baec in start_thread (arg=<value optimized out>) at pthread_create.c:308
#4 0x0fcda8fc in clone () from /opt/mcp/ppcnf/crossroot/lib/libc.so.6

(gdb) fr 0
#0 0x0f902200 in IndCIMXMLHandlerInvokeMethod (mi=0xf9153f0, ctx=0x10021ca8, rslt=0x10021748, ref=0x10023784,
methodName=0x10023978 "_deliver", in=0x10022400, out=0x10021568) at indCIMXMLHandler.c:890
890 in indCIMXMLHandler.c
(gdb) p mi
$1 = (CMPIMethodMI *) 0xf9153f0
(gdb) p *mi
$2 = {hdl = 0x0, ft = 0xf9153d4}
(gdb) p _broker
$3 = (const CMPIBroker *) 0xff78700
(gdb) p *_broker
$4 = {hdl = 0x0, bft = 0xff786ac, eft = 0xff78658, xft = 0xff78714, mft = 0x0}
(gdb) p *ctxLocal
$5 = {hdl = 0xff60b34, ft = 0xff78768}
(gdb) p *hop
$6 = {hdl = 0x1002ace0, ft = 0xff7884c}
(gdb) p *hdlr
$7 = {hdl = 0x1002be80, ft = 0xff787e4}
(gdb) p *context
Cannot access memory at address 0x0
(gdb) p context
$8 = (CMPIString *) 0x0

Sfcb core dumped this time due to an invalid "SequenceContext" in the indication delivery handle.
Bugzilla 76814 only resolved part of the problem in same code path w.r.t invalid cim indication handle.

Need to resolve this issue at the earliest and also implement defensive coding checks in the CIM indictation delivery path.

[Narasimha Sharoff]

Reviewing the system, I think the repository contents look old and could be pre 1.3.12.
I don't see the SequenceContext property being created. Hence during indication delivery, segfault is seen.

Mike suggested that SequenceContext was added only during sfcb 1.3.12.

Please install the repository correctly, create indication filters, handlers,, and subscriptions. Give it a try.

=====================
$ ls -l
-rw-rw-rw- 1 root root 6016 Nov 23 01:28 cim_indicationfilter
-rw-rw-rw- 1 root root 888 Nov 23 01:28 cim_indicationfilter.idx
-rw-rw-rw- 1 root root 5544 Nov 23 01:28 cim_indicationhandlercimxml
-rw-rw-rw- 1 root root 1018 Nov 23 01:28 cim_indicationhandlercimxml.idx
-rw-rw-rw- 1 root root 4548 Nov 23 01:28 cim_indicationservice
-rw-rw-rw- 1 root root 314 Nov 23 01:28 cim_indicationservice.idx
-rw-rw-rw- 1 root root 8336 Nov 25 03:14 cim_indicationsubscription
-rw-rw-rw- 1 root root 2264 Nov 25 03:14 cim_indicationsubscription.idx
-rwxr-x--x 1 root root 161377 Jan 1 1970 classSchemas.gz
-rwxr-x--x 1 root root 10332 Jan 1 1970 qualifiers
-rwxr-x--x 1 root root 1858 Jan 1 1970 qualifiers.idx
-rw-rw-rw- 1 root root 1156 Feb 7 2003 sfcb_elementcapabilities
-rw-rw-rw- 1 root root 582 Feb 7 2003 sfcb_elementcapabilities.idx
-rwxr-x--x 1 root root 824 Jan 1 1970 sfcb_indicationservicecapabilities
-rwxr-x--x 1 root root 40 Jan 1 1970 sfcb_indicationservicecapabilities.idx
-rwxr-x--x 1 root root 1140 Jan 1 1970 sfcb_registeredprofile
-rwxr-x--x 1 root root 80 Jan 1 1970 sfcb_registeredprofile.idx
==================================================

[Narasimha Sharoff]

( Dup to: SF: 3512425 )

In SFCB 1.3.14 , with RI disabled this code path will not be traversed.
In addtion, a fix is currently available via: SF: 3512425 - SequenceContext needs to be set at startup