Matt, could you try svn and see if this helps please.

Matt Richards wrote:
> I am a little closer now. I added some debugging information in 
> client_protocol.c (~line 338):
> 
> Debug("Receive counter challenge from server\n");
> 
> /* proposition S3 */
> memset(in,0,CF_BUFSIZE);
> encrypted_len = ReceiveTransaction(conn->sd,in,NULL);
> 
> if (encrypted_len < 0)
>    {
>    CfOut(cf_error,"","Protocol transaction sent illegal cipher length");
>    return false;
>    }
> 
> if ((decrypted_cchall = malloc(encrypted_len)) == NULL)
>    {
>    snprintf(MATT_MESS,CF_BUFSIZE,"memory failure 
> TWO:encrypted_len:%d",encrypted_len);
>    FatalError(MATT_MESS);
>    }
> 
> cf-agent dies with FatalError:
> Fatal cfengine error: memory failure TWO:encrypted_len:0
> 
> 
> It appears that the encrypted_len is indeed zero on the challenge response to 
> the policy host. On AIX, that will result in a NULL malloc - which in turn 
> fatals with a memory error in cf-agent. From the timestamps, the client who 
> fails first, then cf-serverd on the policy host core dumps two seconds later. 
> 
> I don't know enough about the SSL communication between client and host, so I 
> need a little help here. Is it possible that a encrypted length can be zero?
> 
> 
> 
> On Dec 7, 2009, at 8:55 AM, Mark Burgess wrote:
> 
>> Perhaps you have access to some fancy tools, like purify, insight etc
>> that might help debug this. It sounds like some kind of heap corruption.
>>
>> M
>>
>> Matt Richards wrote:
>>> Well, I hate to say this, but I am still having this problem (svn 657
>>> now). However, I am getting closer. When cf-serverd core dumps, I get
>>> a corresponding "Fatal cfengine error: memory failure" on the client.
>>> I am not sure which one dies first, but I am guessing the client
>>> (cf-agent). I don't understand why it would get a memory failure, the
>>> code is just doing a regular malloc, and the machines (random, never
>>> the same one twice) in question have plenty of memory. I will dig
>>> (pulling my soxs up) more, but it is just odd.
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@cfengine.org
> https://cfengine.org/mailman/listinfo/help-cfengine

-- 
Mark Burgess

-------------------------------------------------
Professor of Network and System Administration
Oslo University College, Norway

Personal Web: http://www.iu.hio.no/~mark
Office Telf : +47 22453272
-------------------------------------------------
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to