radvd terminates with segfault on startup

[[e-mail]]

Binary package hint: radvd

here's what I'm doing:

# /etc/init.d/radvd start
Starting radvd: Segmentation fault
failed.

It produces the following kernel message:
[59144.931344] radvd[4077]: segfault at 20 ip 0000000000404095 sp 00007fff63cdd0e0 error 6 in radvd[400000+15000]

radvd.conf (with cleaned prefix):

interface eth1
{
   AdvSendAdvert on;

   prefix xxxx:xxxx:xxxx:xxxxx::/64
   {
 AdvRouterAddr on;
   };
};

interface eth0 { };

got the following debug messages:
Apr 20 10:58:02 fricka radvd[4077]: version 1.3 started
Apr 20 10:58:02 fricka radvd[4077]: mtu for eth1 is 1500
Apr 20 10:58:02 fricka radvd[4077]: hardware type for eth1 is 1
Apr 20 10:58:02 fricka radvd[4077]: link layer token length for eth1 is 48
Apr 20 10:58:02 fricka radvd[4077]: prefix length for eth1 is 64
Apr 20 10:58:02 fricka radvd[4077]: interface definition for eth1 is ok
Apr 20 10:58:02 fricka radvd[4077]: mtu for eth0 is 1500
Apr 20 10:58:02 fricka radvd[4077]: hardware type for eth0 is 1
Apr 20 10:58:02 fricka radvd[4077]: link layer token length for eth0 is 48
Apr 20 10:58:02 fricka radvd[4077]: prefix length for eth0 is 64
Apr 20 10:58:02 fricka radvd[4077]: interface definition for eth0 is ok
Apr 20 10:58:02 fricka radvd[4077]: Initializing privsep
Apr 20 10:58:58 fricka radvd[4077]: recvmsg len=16
Apr 20 10:58:58 fricka radvd[4077]: if_index 3
Apr 20 10:58:58 fricka radvd[4077]: found Interface: eth1
Apr 20 10:58:58 fricka radvd[4077]: random mdelay for eth1: 193.84

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: radvd 1:1.3-1.1
ProcVersionSignature: Ubuntu 2.6.32-21.32-server 2.6.32.11+drm33.2
Uname: Linux 2.6.32-21-server x86_64
Architecture: amd64
Date: Tue Apr 20 10:56:18 2010
InstallationMedia: Ubuntu-Server 10.04 "Lucid Lynx" - Beta amd64 (20100406.1)
ProcEnviron:
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: radvd

[[e-mail] (schmud)]

could strace output be useful?

[[e-mail] (schmud)]

btw. exactly the same network config runs perfectly on debian lenny.

[[e-mail] (schmud)]

I recognised the process is crashing when it gets the very first packet to ff02::2

here's the strace part:

Process 13196 attached - interrupt to quit
select(5, [4], NULL, NULL, NULL) = 1 (in [4])
recvmsg(4, {msg_name(28)={sa_family=AF_INET6, sin6_port=htons(0), inet_pton(AF_INET6, "fe80::21f:f3ff:fe41:3a7c", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=if_nametoindex("eth1")}, msg_iov(1)=[{"\205\0\37t\0\0\0\0\1\1\0\37\363A:|\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096}], msg_controllen=64, {cmsg_len=36, cmsg_level=SOL_IPV6, cmsg_type=, ...}, msg_flags=0}, 0) = 16
rt_sigprocmask(SIG_BLOCK, [ALRM], [], 8) = 0
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
Process 13196 detached

I'm not really sure, if that is an Ubuntu or a radvd bug. However, this is working perfectly on debian Lenny.

[LaMont Jones (lamont)]

This appears to have been introduced somewhere after 1:1.2-1 and in or before 1:1.3-1.1, since the karmic binary works just fine.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[DooMMasteR (winrootkit)]

We have the same problem, but only with every other prefix ~50% of the prefixes do not produce a segfault.

interface eth0
{
   AdvSendAdvert on;
   MaxRtrAdvInterval 30;

   prefix ::/64
   {
      AdvOnLink on;
      AdvAutonomous on;
      AdvRouterAddr off;
      AdvValidLifetime 300;
      AdvPreferredLifetime 120;
      DeprecatePrefix on;
   };
};