1.1.6 silc_server_free_sock_user_data -> silc_async_abort -> boom

[Stuart Henderson]

21:31:07 silc_server_packet_parse_type:299: Received COMMAND packet [flags 0]
21:31:07 silc_server_command_process_timeout:179: Calling PING command
21:31:07 silc_server_command_send_status_reply:491: Sending command status 0
21:31:07 silc_server_packet_send:47: Sending COMMAND REPLY packet
21:31:07 silc_server_command_free:307: Command context 0x4dad4f00 refcnt 1->0
21:31:07 silc_server_packet_parse_type:299: Received COMMAND packet [flags 0]
21:31:07 silc_server_command_process_timeout:179: Calling PING command
21:31:07 silc_server_command_send_status_reply:491: Sending command status 0
21:31:07 silc_server_packet_send:47: Sending COMMAND REPLY packet
21:31:07 silc_server_command_free:307: Command context 0x4dad4f00 refcnt 1->0
21:31:08 silc_server_packet_parse_type:299: Received COMMAND packet [flags 0]
21:31:08 silc_server_command_process_timeout:179: Calling PING command
21:31:08 silc_server_command_send_status_reply:491: Sending command status 0
21:31:08 silc_server_packet_send:47: Sending COMMAND REPLY packet
21:31:08 silc_server_command_free:307: Command context 0x4dad5980 refcnt 1->0
21:31:08 silc_server_packet_parse_type:299: Received COMMAND packet [flags 0]
21:31:08 silc_server_command_process_timeout:179: Calling PING command
21:31:08 silc_server_command_send_status_reply:491: Sending command status 0
21:31:08 silc_server_packet_send:47: Sending COMMAND REPLY packet
21:31:08 silc_server_command_free:307: Command context 0x4dad5980 refcnt 1->0
21:31:14 silc_server_packet_parse_type:299: Received COMMAND packet [flags 0]
21:31:14 silc_server_command_process_timeout:179: Calling PING command
21:31:14 silc_server_command_send_status_reply:491: Sending command status 0
21:31:14 silc_server_packet_send:47: Sending COMMAND REPLY packet
21:31:14 silc_server_command_free:307: Command context 0x4dad5900 refcnt 1->0
21:31:17 silc_server_packet_parse_type:299: Received COMMAND packet [flags 0]
21:31:17 silc_server_command_process_timeout:179: Calling PING command
21:31:17 silc_server_command_send_status_reply:491: Sending command status 0
21:31:17 silc_server_packet_send:47: Sending COMMAND REPLY packet
21:31:17 silc_server_command_free:307: Command context 0x4dad5980 refcnt 1->0
21:31:23 silc_server_packet_eos:197: End of stream received
21:31:23 silc_server_free_sock_user_data:3034: Start
21:31:23 silc_server_free_sock_user_data:3045: Abort active protocol

<sthen at pyxis:/var/log/cores:6>$ sudo gdb /usr/obj/ports/silc-server-1.1.6-opero>
GNU gdb 6.3
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "sparc64-unknown-openbsd4.3"...
Core was generated by `silcd'.
Program terminated with signal 10, Bus error.
Reading symbols from /usr/local/lib/libiconv.so.4.0...done.
Loaded symbols for /usr/local/lib/libiconv.so.4.0
Reading symbols from /usr/lib/libpthread.so.10.0...done.
Loaded symbols for /usr/lib/libpthread.so.10.0
Reading symbols from /usr/lib/libc.so.44.0...done.
Loaded symbols for /usr/lib/libc.so.44.0
Reading symbols from /usr/libexec/ld.so...done.
Loaded symbols for /usr/libexec/ld.so
#0  0x00000000001a7ab0 in silc_async_abort (op=0xadfcc1fd432818f6, abort_cb=0,
    context=0x0) at silcasync.c:53
53        if (op->abort_cb)
(gdb) bt full
#0  0x00000000001a7ab0 in silc_async_abort (op=0xadfcc1fd432818f6, abort_cb=0,
    context=0x0) at silcasync.c:53
No locals.
#1  0x0000000000120a1c in silc_server_free_sock_user_data (server=0x42422400,
    sock=0x4960ed00, signoff_message=0x0) at server.c:3046
        idata = 0x42e26900
        ip = 0xfb09ba87d7dd420 <Address 0xfb09ba87d7dd420 out of bounds>
        port = 18056
#2  0x00000000001294fc in silc_server_packet_eos (engine=0x4ace3c80,
    stream=0x4960ed00, callback_context=0x42422400, stream_context=0x42e26900)
    at server.c:215
        server = 0x42422400
        idata = 0x42e26900
#3  0x00000000001800cc in silc_packet_stream_read (ps=0x4960ed00,
    ret_ps=0xfffffffffffe62f8) at silcpacket.c:390
        stream = 0x50346780
        inbuf = 0x40980d60
        connected = 0 '\0'
        ret = 0
#4  0x000000000017da80 in silc_packet_stream_io (stream=0x50346780,
    status=SILC_STREAM_CAN_READ, context=0x4960ed00) at silcpacket.c:430
        remote = 0x0
        ps = 0x4960ed00
#5  0x0000000000203890 in silc_socket_stream_io (schedule=0x4a42a900,
    app_context=0x42422400, type=SILC_TASK_READ, fd=34, context=0x50346780)
    at silcunixsocketstream.c:36
        stream = 0x50346780
#6  0x0000000000198e48 in silc_schedule_dispatch_fd (schedule=0x4a42a900)
    at silcschedule.c:61
        task = 0x4dad5000
        t = 0x4dad5000
#7  0x00000000001996a8 in silc_schedule_iterate (schedule=0x4a42a900,
    timeout_usecs=-1) at silcschedule.c:455
        timeout = {tv_sec = -4801212403255045156, tv_usec = 1269810240}
        ret = 1
#8  0x00000000001969c4 in silc_schedule (schedule=0x4a42a900)
    at silcschedule.c:499
No locals.
#9  0x000000000011d688 in silc_server_run (server=0x42422400) at server.c:1190
No locals.
#10 0x000000000010dcb4 in main (argc=3, argv=0xfffffffffffe6d48) at silcd.c:753
        ret = 1
        opt = -1
        option_index = 1060152
        foreground = 1 '\001'
        opt_create_keypair = 0 '\0'
        silcd_config_file = 0x40980020 "/etc/silcd/silcd.conf"
        sa = {__sigaction_u = {__sa_handler = 0x1, __sa_sigaction = 0x1},
  sa_mask = 0, sa_flags = 0}