[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: Invalid free() in syncrepl (ITS#2995)



Looks like modlist is used in a loop; it's init'd once and freed in the loop
but never reset to NULL.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support

> -----Original Message-----
> From: owner-openldap-bugs@OpenLDAP.org
> [mailto:owner-openldap-bugs@OpenLDAP.org]On Behalf Of lukeh@padl.com
> Sent: Wednesday, March 03, 2004 6:09 PM
> To: openldap-its@OpenLDAP.org
> Subject: Invalid free() in syncrepl (ITS#2995)
>
>
> Full_Name: Luke Howard
> Version: 2.2.6
> OS: Linux
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (165.228.130.12)
>
>
> Output from valgrind, further investigation required. Built
> from rel eng
> branch.
>
> ==26394== Thread 4:
> ==26394== Invalid free() / delete / delete[]
> ==26394==    at 0x4002D559: free (vg_replace_malloc.c:186)
> ==26394==    by 0x81112C0: ber_bvarray_free (memory.c:741)
> ==26394==    by 0x809D198: slap_mod_free (mods.c:459)
> ==26394==    by 0x809D1BC: slap_mods_free (mods.c:470)
> ==26394==    by 0x80A10BC: do_syncrep2 (syncrepl.c:521)
> ==26394==    by 0x80A1A82: do_syncrepl (syncrepl.c:848)
> ==26394==    by 0x80EF8FB: ldap_int_thread_pool_wrapper (tpool.c:467)
> ==26394==    by 0x40444576: thread_wrapper (vg_libpthread.c:660)
> ==26394==    by 0x40157E7F: do__quit (vg_scheduler.c:1787)
> ==26394==  Address 0x8150838 is not stack'd, malloc'd or free'd
>
>
>