wpa_supplicant: segmentation fault

[Pete R]

I have been so far unable to generate a core file after wpa_supplicant exits with a 
"Segmentation fault" message (even though I checked that other processes do generate 
one when they receive a SIGSEGV signal). 
 
The output of GDB is included below -- unfortunately, it does not seem to have any 
useful debug information. What I can add that might be of relevance is that
 
* After crashing for the first time, the exit code for wpa_supplicant is 139. 
* Any attempt at rerunning wpa_supplicant after the first crash freezes the shell. 
The associated process enters state D+ (Uninterruptable sleep), and the only way to kill it is by rebooting. 
 
Any suggestions as to how to force the system to generate a core dump or any other useful debug information?
 
Many thanks in advance! 
 
pete_r880 at yahoo.com
 
 
[root at localhost ~]# gdb wpa_supplicant
(gdb) run -D ndiswrapper -i wlan0 -c /etc/wpa_supplicant.conf -dd
Starting program: /usr/local/bin/wpa_supplicant -D ndiswrapper -i wlan0 -c /etc/wpa_supplicant.conf -dd
Initializing interface 'wlan0' conf '/etc/wpa_supplicant.conf' driver 'ndiswrapper'
Configuration file '/etc/wpa_supplicant.conf' -> '/etc/wpa_supplicant.conf'
Reading configuration file '/etc/wpa_supplicant.conf'
ctrl_interface='/var/run/wpa_supplicant'
Line: 2 - start of a new network block
ssid - hexdump_ascii(len=8):
56 61 6c 68 61 6c 6c 61 mywnet
PSK (ASCII passphrase) - hexdump_ascii(len=31): [REMOVED]
key_mgmt: 0x2
proto: 0x1
PSK (from passphrase) - hexdump(len=32): [REMOVED]
Priority group 0
id=0 ssid='mywnet'
Initializing interface (2) 'wlan0'
ioctl[SIOCSIWPMKSA]: No such device
Own MAC address: 00:a0:c5:92:f8:ed
Setting scan request: 0 sec 100000 usec
Using existing control interface directory.
Wireless event: cmd=0x8b06 len=8
State: DISCONNECTED -> SCANNING
Starting AP scan (broadcast SSID)
Scan timeout - try to get results
Received 489 bytes of scan results (2 BSSes)
Scan results: 2
Selecting BSS from priority group 0
0: 00:a0:c5:cc:27:42 ssid='mywnet' wpa_ie_len=24 rsn_ie_len=0 caps=0x11
selected
Trying to associate with 00:a0:c5:cc:27:42 (SSID='mywnet' freq=2447 MHz)
Cancelling scan request
WPA: clearing own WPA/RSN IE
Automatic auth_alg selection: 0x1
WPA: using IEEE 802.11i/D3.0
WPA: Selected cipher suites: group 8 pairwise 8 key_mgmt 2
WPA: set AP WPA IE - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02
WPA: clearing AP RSN IE
WPA: using GTK TKIP
WPA: using PTK TKIP
WPA: using KEY_MGMT WPA-PSK
WPA: Set own WPA IE default - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02
No keys have been configured - skip key clearing
State: SCANNING -> ASSOCIATING
Program terminated with signal SIGSEGV, Segmentation fault.
The program no longer exists.
(gdb) bt
No stack.
(gdb) run -D ndiswrapper -i wlan0 -c /etc/wpa_supplicant.conf -dd
Starting program: /usr/local/bin/wpa_supplicant -D ndiswrapper -i wlan0 -c /etc/wpa_supplicant.conf -dd
Initializing interface 'wlan0' conf '/etc/wpa_supplicant.conf' driver 'ndiswrapper'
Configuration file '/etc/wpa_supplicant.conf' -> '/etc/wpa_supplicant.conf'
Reading configuration file '/etc/wpa_supplicant.conf'
ctrl_interface='/var/run/wpa_supplicant'
Line: 2 - start of a new network block
ssid - hexdump_ascii(len=8):
56 61 6c 68 61 6c 6c 61 mywnet
PSK (ASCII passphrase) - hexdump_ascii(len=31): [REMOVED]
key_mgmt: 0x2
proto: 0x1
PSK (from passphrase) - hexdump(len=32): [REMOVED]
Priority group 0
id=0 ssid='mywnet'
Initializing interface (2) 'wlan0'
[freezes]
 

Jouni Malinen <jkmaline at cc.hut.fi> wrote:

On Mon, Aug 22, 2005 at 01:48:13PM -0700, Pete R wrote:

> [root at localhost ~]# wpa_supplicant -D ndiswrapper -i wlan0 -c /etc/wpa_supplicant.conf -dd

> State: SCANNING -> ASSOCIATING
> Segmentation fault

Could you please try to run wpa_supplicant under a debugger to get a
backtrace of that segmentation fault? Following steps should provide the
information I'm looking for assuming the wpa_supplicant binary was built
with debugging information:

gdb wpa_supplicant
run -D ndiswrapper -i wlan0 -c /etc/wpa_supplicant.conf -dd
bt

('run' and 'bt' commands are run in gdb; I'm interested in the output of
the 'bt' command)

Alternatively, enable core dumps with 'ulimit -c 3000000' and run
wpa_supplicant again. This should generate a 'core' file when the
segmentation fault happens. After this, send me a copy of the core file
and the wpa_supplicant binary you used.








__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20050827/2b1fd9c0/attachment.htm