[DISPATCH-1477] Crash router by deleting authServicePlugin entity through management call

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.9.0
• Fix Version/s: 1.10.0
• Component/s: Management Agent
• Assignee: Ganesh Murthy
• Reporter: Ernest Allen
• Created: 09/Nov/19 15:15
• Updated: 20/Dec/19 12:10
• Resolved: 11/Nov/19 19:33

Description

I'm able to crash the router to which the console is connected.

Below are the step to do it through a console. It should also be possible through qdmanage.

Steps:

• Go to the entities page
• select authServicePlugin from the list of entities on the left
• if there are no plugins listed
  • click on the 'no data' item on the left
  • select the Create tab at the top of the area on the right
  • click the Create button at the bottom of the form
  • reselect the authServicePlugin from the list
• select an authServicePlugin from the sublist
• click the Delete tab
• click the Delete button

Expected results:

The selected authServicePlugin should be deleted

Actual results:

The router to which the console is connected crashes.

 

Last entry from the router's log:

2019-11-09 10:04:26.052574 -0500 CONN_MGR (warning) Attribute authService of entity authServicePlugin has been deprecated. Use host and port instead.
2019-11-09 10:04:26.052620 -0500 CONN_MGR (info) Created SASL plugin config with name (null)

From gdb:

Thread 5 "qdrouterd" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffe37fe700 (LWP 15437)]
0x00007ffff7f3a1a6 in config_sasl_plugin_free (cm=0x7df510,
sasl_plugin=0xffffffffd0273150)
at /home/eallen/workspace/qpid-dispatch/src/connection_manager.c:486
486 DEQ_REMOVE(cm->config_sasl_plugins, sasl_plugin);

 

Here is the backtrace:

(gdb) bt
#0 0x00007ffff7f3a1a6 in config_sasl_plugin_free (cm=0x7df510,
sasl_plugin=0xffffffffd0273150)
at /home/eallen/workspace/qpid-dispatch/src/connection_manager.c:486
#1 0x00007ffff7f3c062 in qd_connection_manager_delete_sasl_plugin (
qd=0x407640, impl=0xffffffffd0273150)
at /home/eallen/workspace/qpid-dispatch/src/connection_manager.c:924
#2 0x00007fffe9dfcace in ffi_call_unix64 () from /lib64/libffi.so.6
#3 0x00007fffe9dfc48f in ffi_call () from /lib64/libffi.so.6
#4 0x00007ffff7eaa417 in _ctypes_callproc ()
from /usr/lib64/python2.7/lib-dynload/_ctypes.so
#5 0x00007ffff7ea3d52 in ?? ()
from /usr/lib64/python2.7/lib-dynload/_ctypes.so
#6 0x00007ffff7cafa87 in PyObject_Call () from /lib64/libpython2.7.so.1.0
#7 0x00007ffff7d865a1 in PyEval_EvalFrameEx () from /lib64/libpython2.7.so.1.0
#8 0x00007ffff7d8c1d2 in PyEval_EvalCodeEx () from /lib64/libpython2.7.so.1.0
#9 0x00007ffff7d89425 in PyEval_EvalFrameEx () from /lib64/libpython2.7.so.1.0
#10 0x00007ffff7d8c1d2 in PyEval_EvalCodeEx () from /lib64/libpython2.7.so.1.0
#11 0x00007ffff7d89425 in PyEval_EvalFrameEx () from /lib64/libpython2.7.so.1.0
#12 0x00007ffff7d8c1d2 in PyEval_EvalCodeEx () from /lib64/libpython2.7.so.1.0
#13 0x00007ffff7d89425 in PyEval_EvalFrameEx () from /lib64/libpython2.7.so.1.0
#14 0x00007ffff7d8c1d2 in PyEval_EvalCodeEx () from /lib64/libpython2.7.so.1.0
#15 0x00007ffff7cc892e in ?? () from /lib64/libpython2.7.so.1.0
#16 0x00007ffff7cafa87 in PyObject_Call () from /lib64/libpython2.7.so.1.0
-Type <RET> for more, q to quit, c to continue without paging-c
#17 0x00007ffff7cbb44e in ?? () from /lib64/libpython2.7.so.1.0
#18 0x00007ffff7cafa87 in PyObject_Call () from /lib64/libpython2.7.so.1.0
#19 0x00007ffff7caf9c3 in PyObject_CallFunction () from /lib64/libpython2.7.so.1.0
#20 0x00007ffff7f5893f in qd_io_rx_handler (context=0x7fffe9859de0, msg=0x7fffe40d8d18, link_id=0, inter_router_cost=1, ignore=0) at /home/eallen/workspace/qpid-dispatch/src/python_embedded.c:541
#21 0x00007ffff7f74426 in qdr_forward_on_message (core=0x7e6ae0, work=0x7fffe418cb58) at /home/eallen/workspace/qpid-dispatch/src/router_core/forwarder.c:263
#22 0x00007ffff7f7dc2d in qdr_general_handler (context=0x7e6ae0) at /home/eallen/workspace/qpid-dispatch/src/router_core/router_core.c:769
#23 0x00007ffff7f9b9d4 in qd_timer_visit () at /home/eallen/workspace/qpid-dispatch/src/timer.c:200
#24 0x00007ffff7f98cdc in handle (qd_server=0x737d90, e=0x84ca90, pn_conn=0x0, ctx=0x0) at /home/eallen/workspace/qpid-dispatch/src/server.c:913
#25 0x00007ffff7f991cb in thread_run (arg=0x737d90) at /home/eallen/workspace/qpid-dispatch/src/server.c:1009
#26 0x00007ffff7e7d4aa in start_thread () from /lib64/libpthread.so.0
#27 0x00007ffff7b213f3 in clone () from /lib64/libc.so.6