Bug #55286: Segfault when Open Policy Agent authorization is enabled - rgw - Ceph

Actions

Copy link

Bug #55286

closed

Segfault when Open Policy Agent authorization is enabled

Added by Benoît Knecht about 2 years ago. Updated 5 months ago.

Status:

Resolved

Priority:

Normal

Assignee:

Benoît Knecht

Target version:

% Done:

100%

Source:

Tags:

opa backport_processed

Backport:

pacific quincy

Regression:

Severity:

2 - major

Reviewed:

Affected Versions:

Ceph - v16.2.7

ceph-qa-suite:

Pull request ID:

45873

Crash signature (v1):

Crash signature (v2):

Description

On Pacific, radosgw segfault when `rgw_use_opa_authz=true`:

```
2022-04-05T09:03:01.940+0000 7fa29c225700 -1 ** Caught signal (Segmentation fault) *
in thread 7fa29c225700 thread_name:radosgw

ceph version 16.2.7 (dd0603118f56ab514f133c8d2e3adfc983942503) pacific (stable)
 1: /lib64/libpthread.so.0(+0x12c20) [0x7fa2d61e1c20]
 2: (rgw_opa_authorize(RGWOp*&, req_state*)+0xe90) [0x7fa2e0e54460]
 3: (rgw_process_authenticated(RGWHandler_REST*, RGWOp*&, RGWRequest*, req_state*, optional_yield, bool)+0xd7d) [0x7fa2e0de17bd]
 4: (process_request(rgw::sal::RGWRadosStore*, RGWREST*, RGWRequest*, std::__cxx11::basic_string&lt;char, std::char_traits&lt;char&gt;, std::allocator&lt;char&gt; > const&, rgw::auth::StrategyRegistry const&, RGWRestfulIO*, OpsLogSink*, optional_yield, rgw::dmclock::Scheduler*, std::__cxx11::basic_string&lt;char, std::char_traits&lt;char&gt;, std::allocator&lt;char&gt; >, std::chrono::duration&lt;unsigned long, std::ratio&lt;1l, 1000000000l&gt; >, int*)+0x2861) [0x7fa2e0de53b1]
 5: /lib64/libradosgw.so.2(+0x4b4f73) [0x7fa2e0d34f73]
 6: /lib64/libradosgw.so.2(+0x4b6a14) [0x7fa2e0d36a14]
 7: /lib64/libradosgw.so.2(+0x4b6c7e) [0x7fa2e0d36c7e]
 8: make_fcontext()
```

It was working fine on Nautilus, and I haven't tested Octopus.

Related issues 2 (0 open — 2 closed)