Re: (ITS#3772) segfault in test011-glue-slapadd

[hyc@symas.com]

I think this is a Makefile / dependencies bug. Do a make clean in the 
overlays directory and then rerun make in slapd.

Kurt D. Zeilenga wrote:
> (gdb) print *op
> $1 = {o_hdr = 0x82592c4, o_tag = 99, o_time = 1118638040, o_bd = 0x1, 
>   o_req_dn = {bv_len = 148326784, bv_val = 0x11 <Address 0x11 out of bounds>}, 
>   o_req_ndn = {bv_len = 148328668, 
>     bv_val = 0x11 <Address 0x11 out of bounds>}, o_request = {oq_add = {
>       rs_e = 0x8d7510c, rs_modlist = 0x2}, oq_bind = {rb_method = 148328716, 
>       rb_cred = {bv_len = 2, bv_val = 0x0}, rb_edn = {bv_len = 0, 
>         bv_val = 0x0}, rb_ssf = 0, rb_tmp_mech = {bv_len = 0, bv_val = 0x0}}, 
>     oq_compare = {rs_ava = 0x8d7510c}, oq_modify = {rs_modlist = 0x8d7510c, 
>       rs_increment = 2}, oq_modrdn = {rs_newrdn = {bv_len = 148328716, 
>         bv_val = 0x2 <Address 0x2 out of bounds>}, rs_nnewrdn = {bv_len = 0, 
>         bv_val = 0x0}, rs_newSup = 0x0, rs_nnewSup = 0x0, 
>       rs_deleteoldrdn = 0}, oq_search = {rs_scope = 148328716, rs_deref = 2, 
>       rs_slimit = 0, rs_tlimit = 0, rs_limit = 0x0, rs_attrsonly = 0, 
>       rs_attrs = 0x0, rs_filter = 0x0, rs_filterstr = {bv_len = 148328740, 
>         bv_val = 0xf <Address 0xf out of bounds>}}, oq_abandon = {
>       rs_msgid = 148328716}, oq_cancel = {rs_msgid = 148328716}, 
>     oq_extended = {rs_reqoid = {bv_len = 148328716, 
>         bv_val = 0x2 <Address 0x2 out of bounds>}, rs_flags = 0, 
>       rs_reqdata = 0x0}, oq_pwdexop = {rs_reqoid = {bv_len = 148328716, 
>         bv_val = 0x2 <Address 0x2 out of bounds>}, rs_flags = 0, rs_old = {
>         bv_len = 0, bv_val = 0x0}, rs_new = {bv_len = 0, bv_val = 0x0}, 
>       rs_mods = 0x0, rs_modtail = 0x8d75124}}, o_abandon = 148328756, 
>   o_cancel = 0, o_groups = 0x0, o_do_not_cache = 0 '\000', 
>   o_is_auth_check = 0 '\000', o_nocaching = 0 '\000', 
>   o_delete_glue_parent = 0 '\000', o_ctrlflag = '\000' <repeats 31 times>, 
>   o_controls = 0x0, o_authz = {sai_method = 136680220, sai_mech = {
>       bv_len = 128, bv_val = 0x0}, sai_dn = {bv_len = 0, bv_val = 0x0}, 
>     sai_ndn = {bv_len = 0, bv_val = 0x0}, sai_ssf = 0, sai_transport_ssf = 0, 
>     sai_tls_ssf = 0, sai_sasl_ssf = 0}, o_ber = 0x0, o_res_ber = 0x845a0c0, 
>   o_callback = 0x0, o_ctrls = 0x8d74970, o_private = 0x0, o_next = {
>     stqe_next = 0x0}}
> (gdb) print *op->o_bd
> Cannot access memory at address 0x1.
>
> At 10:31 PM 6/12/2005, Howard Chu wrote:
>   
>> kurt@OpenLDAP.org wrote:
>>     
>>> #0  0x8126213 in glue_chk_controls (op=0x82c2600, rs=0x8bf4db0) at glue.c:220
>>> 220             slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
>>> (gdb) where
>>> #0  0x8126213 in glue_chk_controls (op=0x82c2600, rs=0x8bf4db0) at glue.c:220
>>> #1  0x80afa12 in over_op_func (op=0x82c2600, rs=0x8bf4db0,     which=op_aux_chk_controls) at backover.c:377
>>> #2  0x80afc52 in over_aux_chk_controls (op=0x82c2600, rs=0x8bf4db0)
>>>    at backover.c:491
>>> #3  0x8077fe8 in backend_check_restrictions (op=0x82c2600, rs=0x8bf4db0,     opdata=0x0) at backend.c:886
>>> #4  0x807072b in fe_op_search (op=0x82c2600, rs=0x8bf4db0) at search.c:367
>>> #5  0x8070445 in do_search (op=0x82c2600, rs=0x8bf4db0) at search.c:223
>>> #6  0x806e91c in connection_operation (ctx=0x8bf4e3c, arg_v=0x82c2600)
>>>    at connection.c:1049
>>> #7  0x8149105 in ldap_int_thread_pool_wrapper (xpool=0x822e3c0) at tpool.c:479
>>> #8  0x285ba4d8 in _thread_start () from /usr/lib/libc_r.so.4
>>> #9  0x0 in ?? ()
>>>       
>> Works for me on x86_64 Linux. Can you see what's in *op, *op->o_bd, and *op->o_bd_info?
>> -- 
>> -- Howard Chu
>> Chief Architect, Symas Corp.       Director, Highland Sun
>> http://www.symas.com               http://highlandsun.com/hyc
>> Symas: Premier OpenSource Development and Support
>>     
>
>
>
>   


-- 
  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support