segmentation fault during anonymous search (ITS#1598)

[st@hp735c.itsc.cuhk.edu.hk]

Full_Name: SiuTo Wong
Version: 1.2.13
OS: RedHat 7.2
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (203.198.24.2)


Hello,

We installed OpenLDAP 1.2.13 + BerkeleyDB 2.7.7 on an RedHat 7.2. We got
segmentation 
fault error when issuing multiple anonymous search (~20 requests per second) 
continuously.  The problem didn't occur when slapd compiled without thread
support.
The back trace is listed as following.  Would anyone pls help?

Thanks in advance.
Sincerely,
ST Wong

(gdb) q
[root@monday core1]# gdb slapd core.17616
GNU gdb Red Hat Linux 7.x (5.0rh-15) (MI_OUT)
Copyright 2001 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...

warning: exec file is newer than core file.
Core was generated by `/usr/local/openldap/libexec/slapd -f
/usr/local/openldap/etc/cu.conf -l local4'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/libpthread.so.0...done.

warning: Unable to set global thread event mask: generic error
[New Thread 1024 (LWP 25902)]
Error while reading shared library symbols:
Can't attach LWP 25902: No such process
Reading symbols from /lib/libpam.so.0...done.
Loaded symbols for /lib/libpam.so.0
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x40102dce in chunk_free (ar_ptr=0x40800010, p=0x40824670) at malloc.c:3242
3242          unlink(next, bck, fwd);
(gdb) bt
#0  0x40102dce in chunk_free (ar_ptr=0x40800010, p=0x40824670) at malloc.c:3242
#1  0x40102ba8 in __libc_free (mem=0x40824678) at malloc.c:3154
#2  0x40154aa3 in __regfree (preg=0xbf5ff4ec) at regex.c:8270
#3  0x08057975 in regex_matches (
    pat=0x80b6f40 "UID=0123-4567,DC=CUHK,DC=EDU,DC=HK", str=0x40824858 "", 
    buf=0x40991828 "UID=1234-5678,DC=CUHK,DC=EDU,DC=HK", matches=0xbf5ff9bc) at
acl.c:533
#4  0x08056fff in acl_access_allowed (a=0x80b65f0, be=0x80b5018, 
    conn=0x401bb7c4, e=0x409883d0, val=0x0, op=0x408247f8, access=8, 
    edn=0x40991828 "UID=1234-5678,DC=CUHK,DC=EDU,DC=HK", matches=0xbf5ff9bc) at
acl.c:279
#5  0x08052331 in send_search_entry (be=0x80b5018, conn=0x401bb7c4, 
    op=0x408247f8, e=0x409883d0, attrs=0x0, attrsonly=0) at result.c:256
#6  0x08062fc6 in ldbm_back_search (be=0x80b5018, conn=0x401bb7c4, 
    op=0x408247f8, base=0x8174ca8 "DC=CUHK,DC=EDU,DC=HK", scope=2, deref=0, 
    slimit=24, tlimit=3600, filter=0x8174cc8, 
    filterstr=0x8174ce8 "(computingid=B123456)", attrs=0x0, attrsonly=0)
    at search.c:311
#7  0x0804cc40 in do_search (conn=0x401bb7c4, op=0x408247f8) at search.c:149
#8  0x0804c269 in connection_operation (arg_v=0x40824530) at connection.c:74
#9  0x40068f87 in pthread_start_thread (arg=0xbf5ffc00) at manager.c:284
(gdb)