slapd crash (ITS#1803)

[kervin@blueprint-tech.com]

This is a multi-part message in MIME format.
--------------060905080301020704090200
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

attached is the packet outlines for the offending packet and the server 
response as reported by tethereal.

The trick might be multiple attributes with no values.

--Kervin

--------------060905080301020704090200
Content-Type: text/plain;
 name="s2.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="s2.txt"

Frame 8 (156 on wire, 156 captured)
    Arrival Time: May  6, 2002 08:48:02.257072000
    Time delta from previous packet: 0.048651000 seconds
    Time relative to first packet: 0.230998000 seconds
    Frame Number: 8
    Packet Length: 156 bytes
    Capture Length: 156 bytes
Ethernet II
    Destination: 00:10:e8:09:f6:96 (TELOCITY_09:f6:96)
    Source: 00:40:f4:29:b2:ff (Cameo_29:b2:ff)
    Type: IP (0x0800)
Internet Protocol, Src Addr: somber (65.186.0.1), Dst Addr: bashful (163.118.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 142
    Identification: 0x437b
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xcc0d (correct)
    Source: somber (65.186.0.1)
    Destination: bashful (163.118.1.20)
Transmission Control Protocol, Src Port: 52447 (52447), Dst Port: ldap (389), Seq: 4130744001, Ack: 4201471354
    Source port: 52447 (52447)
    Destination port: ldap (389)
    Sequence number: 4130744001
    Next sequence number: 4130744091
    Acknowledgement number: 4201471354
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x6a58 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 365651474, tsecr 764982863
Lightweight Directory Access Protocol
    Message: Id=2  Add Request
        Message Length: 83
        Distinguished Name: cn=tester,dc=my-domain,dc=com
        Attribute: description
        Attribute: cn
        Attribute: sn
        Attribute: objectclass

Frame 9 (108 on wire, 108 captured)
    Arrival Time: May  6, 2002 08:48:02.314055000
    Time delta from previous packet: 0.056983000 seconds
    Time relative to first packet: 0.287981000 seconds
    Frame Number: 9
    Packet Length: 108 bytes
    Capture Length: 108 bytes
Ethernet II
    Destination: 00:40:f4:29:b2:ff (Cameo_29:b2:ff)
    Source: 00:10:e8:09:f6:96 (TELOCITY_09:f6:96)
    Type: IP (0x0800)
Internet Protocol, Src Addr: bashful (163.118.1.20), Dst Addr: somber (65.186.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 94
    Identification: 0xeb2b
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0x2f8d (correct)
    Source: bashful (163.118.1.20)
    Destination: somber (65.186.0.1)
Transmission Control Protocol, Src Port: ldap (389), Dst Port: 52447 (52447), Seq: 4201471354, Ack: 4130744091
    Source port: ldap (389)
    Destination port: 52447 (52447)
    Sequence number: 4201471354
    Next sequence number: 4201471396
    Acknowledgement number: 4130744091
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0x80bb (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 764982874, tsecr 365651474
Lightweight Directory Access Protocol
    Message: Id=2  Add Result
        Message Length: 35
        Result Code: Protocol error (0x02)
        Matched DN: (null)
        Error Message: no values for attribute type

--------------060905080301020704090200--