dbopen函数在系统调用异常情况下，返回内容为NULL但是errno却为0(表示正确)

【标题描述】能够简要描述问题：说明什么场景下，做了什么操作，出现什么问题（尽量使用正向表达方式）
【环境信息】
软件信息：
[root@localhost ~]# rpm -qa|grep libdb
libdb-5.3.28-37.oe2203.x86_64
【问题复现步骤】
1，开启ulimit：ulimit -c unlimited
2，准备测试脚本，分别写入kdb5_util，kadminal.lcoal，kinit相关命令
3、通过模拟一系列系统函数故障注入的方式，进行故障注入测试。
4、查看堆栈
必现
【预期结果】
无coredump文件
【实际结果】
有coredump产生
【附件信息】
Reading symbols from kadmin.local...
Reading symbols from /usr/lib/debug//usr/sbin/kadmin.local-1.19.2-2.h10.eulerosv2r11.x86_64.debug...
[New LWP 404715]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib64/libthread_db.so.1".
Core was generated by `/usr/sbin/kadmin.local getpol policy_self'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x00007f69813a2a10 in osa_adb_get_policy (db=0x557e48b49c00, name=name@entry=0x7ffcf687c19d "policy_self", entry_ptr=entry_ptr@entry=0x7ffcf687a750)
at adb_policy.c:201
201 switch((db->db->get(db->db, &dbkey, &dbdata, 0))) {
Missing separate debuginfos, use: dnf debuginfo-install e2fsprogs-1.46.4-7.h12.eulerosv2r11.x86_64 gssproxy-0.8.4-1.eulerosv2r11.x86_64 keyutils-libs-1.6.3-3.h3.eulerosv2r11.x86_64 ncurses-libs-6.3-2.h2.eulerosv2r11.x86_64 openssl-libs-1.1.1m-2.h19.eulerosv2r11.x86_64 pcre2-10.39-1.h3.eulerosv2r11.x86_64 readline-8.1-1.eulerosv2r11.x86_64 zlib-1.2.11-19.h5.eulerosv2r11.x86_64
(gdb) bt
#0 0x00007f69813a2a10 in osa_adb_get_policy (db=0x557e48b49c00, name=name@entry=0x7ffcf687c19d "policy_self", entry_ptr=entry_ptr@entry=0x7ffcf687a750)
at adb_policy.c:201
#1 0x00007f69813a51f8 in krb5_db2_get_policy (context=context@entry=0x557e48ac7ea0, name=name@entry=0x7ffcf687c19d "policy_self",
policy=policy@entry=0x7ffcf687a750) at kdb_db2.c:1289
#2 0x00007f69813a5cd0 in wrap_krb5_db2_get_policy (kcontext=0x557e48ac7ea0, name=0x7ffcf687c19d "policy_self", policy=0x7ffcf687a750) at db2_exp.c:140
#3 0x00007f698f0a2cc7 in kadm5_get_policy (server_handle=0x557e48aca810, name=, entry=entry@entry=0x7ffcf687a7a0) at svr_policy.c:375
#4 0x0000557e486ca7de in kadmin_getpol (argc=, argv=0x557e48b36660) at kadmin.c:1739
#5 0x00007f698f0b5ded in ?? () from /usr/lib64/libss.so.2
#6 0x00007f698f0b5ee3 in ss_execute_command () from /usr/lib64/libss.so.2
#7 0x0000557e486c5829 in main (argc=3, argv=) at ss_wrapper.c:59

从krb5的代码层面看，造成coredump的原因是因为krb5在dbopen函数时，返回db值为空，但是errno值却是0

src-openEuler/libdb

内容风险标识

评论 (3)

src-openEuler/libdb .gitee-modal { width: 500px !important; }

内容风险标识