I got a strange "connection refused"

[Ian jonhson]

>  At what moment did you get a segmentation fault? What is in the strace log up
>  to the moment of a child crash?
>

I got a "connection refused" in client.
The symptom is similar with qin's: sshd can work in debug mode but deamon mode.

It seems crash occurs in session open, but I am not sure.

The dump of strace is as follows:

============= dump of strace  =======================
9336  write(7, "\0\0\0\7\0", 5)         = 5
9336  write(7, "\0\0\0\2OK", 6)         = 6
9336  poll([{fd=4, events=POLLIN, revents=POLLIN}], 1, 0) = 1
9336  read(4, "\0\0\0\7", 4)            = 4
9336  read(4, "\0\0\0\0\2OK", 7)        = 7
9336  write(6, "\0\0\0\0215", 5 <unfinished ...>
9337  <... read resumed> "\0\0\0\21", 4) = 4
9336  <... write resumed> )             = 5
9337  read(4,  <unfinished ...>
9336  write(6, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 16 <unfinished ...>
9337  <... read resumed> "5", 17)       = 1
9336  <... write resumed> )             = 16
9337  read(4,  <unfinished ...>
9336  read(6,  <unfinished ...>
9337  <... read resumed> "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
9337  write(3, "p\223\312\207J\272\7\214L\3762wi\317\7\335E\207\225U\307\244zc\217C\374\205v\331W\177\354z\366\252H\271j\3573u\355@\27\7\335\235",
48) = 48
9337  select(4, [3], NULL, NULL, NULL)  = 1 (in [3])
9337  read(3, "\0042\234?\337D\336\5\24\377\23\370=w7\25\361U^\312\276>\363r9\230\322\311\tv\324\30\263\23\230\311Vj\243!\0\361.a\360\266\6\365V\212\337\233\251\26\31\201\257\226P\24k\3577\17\363\3608p\235ux\305\317*\277\23\357\314!\367",
8192) = 80
9337  write(4, "\0\0\0\0056", 5 <unfinished ...>
9336  <... read resumed> "\0\0\0\5", 4) = 4
9337  <... write resumed> )             = 5
9336  read(6,  <unfinished ...>
9337  write(4, "\0\0\0\0", 4 <unfinished ...>
9336  <... read resumed> "6", 5)        = 1
9337  <... write resumed> )             = 4
9336  read(6,  <unfinished ...>
9337  read(4,  <unfinished ...>
9336  <... read resumed> "\0\0\0\0", 4) = 4
9336  write(6, "\0\0\0\0057", 5 <unfinished ...>
9337  <... read resumed> "\0\0\0\5", 4) = 4
9336  <... write resumed> )             = 5
9337  read(4,  <unfinished ...>
9336  write(6, "\0\0\0\0", 4 <unfinished ...>
9337  <... read resumed> "7", 5)        = 1
9336  <... write resumed> )             = 4
9337  read(4,  <unfinished ...>
9336  read(6,  <unfinished ...>
9337  <... read resumed> "\0\0\0\0", 4) = 4
9337  write(4, "\0\0\0\0018", 5 <unfinished ...>
9336  <... read resumed> "\0\0\0\1", 4) = 4
9337  <... write resumed> )             = 5
9336  read(6,  <unfinished ...>
9337  read(4,  <unfinished ...>
9336  <... read resumed> "8", 1)        = 1
9336  munmap(0xb755e000, 4214784)       = 0
9336  close(4)                          = 0
9336  close(7)                          = 0
9336  write(6, "\0\0\0\0019", 5 <unfinished ...>
9337  <... read resumed> "\0\0\0\1", 4) = 4
9336  <... write resumed> )             = 5
9337  read(4, "9", 1)                   = 1
9337  write(4, "\0\0\0\0010", 5)        = 5
9337  read(4,  <unfinished ...>
9336  read(6, "\0\0\0\1", 4)            = 4
9336  read(6, "0", 1)                   = 1
9336  write(6, "\0\0\0\t1", 5 <unfinished ...>
9337  <... read resumed> "\0\0\0\t", 4) = 4
9336  <... write resumed> )             = 5
9337  read(4, "1", 9)                   = 1
9337  read(4,  <unfinished ...>
9336  write(6, "\0\0\0\1\0\0\0\0", 8 <unfinished ...>
9337  <... read resumed> "\0\0\0\1\0\0\0\0", 8) = 8
9336  <... write resumed> )             = 8
9337  write(3, "K\354\364Lv\252\302B\6v~\304B\350\215\343V\276\327\204\201\r\351\233E\33\300\304>\266\37\361",
32 <unfinished ...>
9336  time([1208226946])                = 1208226946

< -----------------  segment fault here
------------------------------------------

9336  --- SIGSEGV (Segmentation fault) @ 0 (0) ---

----------------------------------------------------------------------------------------->


9327  <... select resumed> )            = ? ERESTARTNOHAND (To be restarted)
9337  <... write resumed> )             = 32
9327  --- SIGCHLD (Child exited) @ 0 (0) ---
9337  write(4, "\0\0\4\350\32", 5 <unfinished ...>
9327  waitpid(-1,  <unfinished ...>
9337  <... write resumed> )             = -1 EPIPE (Broken pipe)
9327  <... waitpid resumed> [{WIFSIGNALED(s) && WTERMSIG(s) ==
SIGSEGV}], WNOHANG) = 9336
9337  --- SIGPIPE (Broken pipe) @ 0 (0) ---
9327  waitpid(-1,  <unfinished ...>
9337  time( <unfinished ...>
9327  <... waitpid resumed> 0xbfdb6778, WNOHANG) = -1 ECHILD (No child
processes)
9337  <... time resumed> [1208226946])  = 1208226946
9327  rt_sigaction(SIGCHLD, NULL,  <unfinished ...>
9337  open("/etc/localtime", O_RDONLY <unfinished ...>
9327  <... rt_sigaction resumed> {0x804d15e, [], 0}, 8) = 0
9337  <... open resumed> )              = -1 ENOENT (No such file or directory)
9327  sigreturn( <unfinished ...>
9337  open("/etc/localtime", O_RDONLY)  = -1 ENOENT (No such file or directory)
9337  open("/etc/localtime", O_RDONLY)  = -1 ENOENT (No such file or directory)
9337  open("/etc/localtime", O_RDONLY)  = -1 ENOENT (No such file or directory)
9337  socket(PF_FILE, SOCK_DGRAM, 0)    = 6
9337  fcntl64(6, F_SETFD, FD_CLOEXEC)   = 0
9337  connect(6, {sa_family=AF_FILE, path="/dev/log"}, 16) = -1 ENOENT
(No such file or directory)
9337  close(6)                          = 0
9337  exit_group(255)                   = ?
9327  <... sigreturn resumed> )         = ? (mask now [])
9327  select(6, [3 5], NULL, NULL, NULL) = 1 (in [5])
9327  close(5)                          = 0
9327  select(6, [3], NULL, NULL, NULL <unfinished ...>

=========================================================================