(ITS#5730) Seg fault with referral entry and search filter (name=some name)

[michael@stroeder.com]

Full_Name: Michael Ströder
Version: RE24
OS: openSUSE Linux 11.0
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (84.163.79.146)


HI!

if searching with (name=some name) slapd seg faults when processing a referral
entry (referral chasing is off). If I delete the entry it works. FWIW: It's
back-hdb.

Ciao, Michael.

------------------- referral entry -------------------

dn: cn=Refers to ldap.openldap.org,ou=Testing,dc=stroeder,dc=de
cn: Refers to ldap.openldap.org
createTimestamp: 20050228152803Z
creatorsName:: Y249TWljaGFlbCBTdHLDtmRlcixvdT1GcmllbmRzLGRjPXN0cm9lZGVyLGRjP
 WRl
entryCSN: 20071213003755.763469Z#000000#000#000000
entryDN: cn=Refers to ldap.openldap.org,ou=Testing,dc=stroeder,dc=de
entryUUID: 150b8f52-1de9-1029-9a2d-eaab50cd2b83
hasSubordinates: FALSE
modifiersName:: Y249bWljaGFlbCBzdHLDtmRlcixvdT1mcmllbmRzLGRjPXN0cm9lZGVyLGRj
 PWRl
modifyTimestamp: 20051021165032Z
objectClass: extensibleObject
objectClass: referral
ref: ldap://ldap.openldap.org/dc=openldap,dc=org
structuralObjectClass: referral
subschemaSubentry: cn=Subschema

------------------- excerpt of syslog -------------------

Oct  8 15:44:05 nb2 slapd[10257]: conn=0 op=5 SRCH base="dc=stroeder,dc=de"
scope=2 deref=0 filter="(|(name=*some name*))" 
Oct  8 15:44:05 nb2 slapd[10257]: conn=0 op=5 SRCH attr=telephonenumber
countImmSubordinates labeledurl displayName cn subordinateCount objectClass
description countTotSubordinates hasSubordinates msDS-Approx-Immed-Subordinates
mobile structuralObjectClass subschemaSubentry mail numSubordinates
numAllSubordinates homephone uid 
Oct  8 15:44:05 nb2 slapd[10257]: <= bdb_substring_candidates: (name) not
indexed 
Oct  8 15:44:10 nb2 kernel: slapd[10260]: segfault at 29 ip 08091834 sp b37da2a0
error 4 in slapd[8048000+1e5000]

------------------- end of console debug output -------------------

ldap_url_parse_ext(ldap://ldap.openldap.org/dc=openldap,dc=org)
>>> dnPretty: <dc=openldap,dc=org>
=> ldap_bv2dn(dc=openldap,dc=org,0)
<= ldap_bv2dn(dc=openldap,dc=org)=0 
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=openldap,dc=org)=0 
<<< dnPretty: <dc=openldap,dc=org>
=> send_search_reference: dn="(null)"
=> access_allowed: read access to "(null)" "entry" requested
=> dn: [5] dc=stroeder,dc=de
Segmentation fault