(ITS#3498) back-meta segfault when deleting seeAlso

[raphael.ouazana@linagora.com]

Full_Name: Raphael Ouazana
Version: 2.2.20 and 2.3.0alpha
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (194.98.7.155)



When I delete the attribute seeAlso of an entry through back-meta, slapd
segfault.

There is the backtrace for OpenLDAP-2.3.0alpha :

conn=0 op=1 MOD attr=seeAlso
 
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16387 (LWP 8266)]
0x080a1058 in ldap_dnattr_rewrite (dc=0x409be55c, a_vals=0x0) at map.c:645
645             for ( last = 0; a_vals[last].bv_val != NULL; last++ );
(gdb) bt
#0  0x080a1058 in ldap_dnattr_rewrite (dc=0x409be55c, a_vals=0x0) at map.c:645
#1  0x08094e15 in meta_back_modify (op=0x818d5b0, rs=0x409bf87c)
    at modify.c:117
#2  0x08066863 in fe_op_modify (op=0x818d5b0, rs=0x409bf87c) at modify.c:461
#3  0x080660cc in do_modify (op=0x818d5b0, rs=0x409bf87c) at modify.c:202
#4  0x08056181 in connection_operation (ctx=0x409bf8fc, arg_v=0x818d5b0)
    at connection.c:1038
#5  0x080b085b in ldap_int_thread_pool_wrapper (xpool=0x8137f28) at tpool.c:467
#6  0x40136941 in pthread_start_thread () from /lib/i686/libpthread.so.0
#7  0x40136a45 in pthread_start_thread_event () from /lib/i686/libpthread.so.0

It is about the same in OpenLDAP-2.2.20.

ldap_dnattr_rewrite seems not to check if a_vals is NULL...

Raphaël Ouazana.