Issue 8003 - segault with jpegPhoto > ~27KB and audit overlay
Summary: segault with jpegPhoto > ~27KB and audit overlay
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: 2.4.40
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-12-12 07:39 UTC by public@raffaelsahli.com
Modified: 2015-07-02 17:46 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description public@raffaelsahli.com 2014-12-12 07:39:25 UTC
Full_Name: Raffael Sahli
Version: 2.4.40
OS: Ubuntu LTS 12.04
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (46.245.145.146)


slapd will crash if a database has the audit overlay enabled and the attribute
jpegPhoto will be modified or added with data bigger than ~27KB.

`/usr/local/libexec/slapd': free(): invalid next size (normal)

Verified with custom builds on Ubuntu lts 12.04/14.04/Mint 14 and bdb/mdb.

Remove the audit overlay or migrate back to 2.4.39 solves the problem.
Comment 1 Howard Chu 2014-12-12 08:08:48 UTC
public@raffaelsahli.com wrote:
> Full_Name: Raffael Sahli
> Version: 2.4.40
> OS: Ubuntu LTS 12.04
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (46.245.145.146)
>
>
> slapd will crash if a database has the audit overlay enabled and the attribute
> jpegPhoto will be modified or added with data bigger than ~27KB.
>
> `/usr/local/libexec/slapd': free(): invalid next size (normal)
>
> Verified with custom builds on Ubuntu lts 12.04/14.04/Mint 14 and bdb/mdb.
>
> Remove the audit overlay or migrate back to 2.4.39 solves the problem.
>
>
Please provide a sample slapd config that demonstrates the problem.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 2 public@raffaelsahli.com 2014-12-15 07:35:44 UTC
On 12.12.2014 09:08, Howard Chu wrote:
> public@raffaelsahli.com wrote:
>> Full_Name: Raffael Sahli
>> Version: 2.4.40
>> OS: Ubuntu LTS 12.04
>> URL: ftp://ftp.openldap.org/incoming/
>> Submission from: (NULL) (46.245.145.146)
>>
>>
>> slapd will crash if a database has the audit overlay enabled and the
>> attribute
>> jpegPhoto will be modified or added with data bigger than ~27KB.
>>
>> `/usr/local/libexec/slapd': free(): invalid next size (normal)
>>
>> Verified with custom builds on Ubuntu lts 12.04/14.04/Mint 14 and
>> bdb/mdb.
>>
>> Remove the audit overlay or migrate back to 2.4.39 solves the problem.
>>
>>
> Please provide a sample slapd config that demonstrates the problem.
>

include		/usr/local/etc/openldap/schema/core.schema
include		/usr/local/etc/openldap/schema/cosine.schema
include		/usr/local/etc/openldap/schema/inetorgperson.schema

pidfile		/usr/local/var/run/slapd.pid
argsfile	/usr/local/var/run/slapd.args

database	mdb
suffix		"dc=my-domain,dc=com"
rootdn		"cn=Manager,dc=my-domain,dc=com"
rootpw		secret
directory	/usr/local/var/openldap-data
index	objectClass	eq

overlay auditlog
auditlog /var/log/audit_slapd.log



-- 
Raffael Sahli

Comment 3 Howard Chu 2014-12-15 14:53:18 UTC
Raffael Sahli wrote:
> On 12.12.2014 09:08, Howard Chu wrote:
>> public@raffaelsahli.com wrote:
>>> Full_Name: Raffael Sahli
>>> Version: 2.4.40
>>> OS: Ubuntu LTS 12.04
>>> URL: ftp://ftp.openldap.org/incoming/
>>> Submission from: (NULL) (46.245.145.146)
>>>
>>>
>>> slapd will crash if a database has the audit overlay enabled and the
>>> attribute
>>> jpegPhoto will be modified or added with data bigger than ~27KB.
>>>
>>> `/usr/local/libexec/slapd': free(): invalid next size (normal)
>>>
>>> Verified with custom builds on Ubuntu lts 12.04/14.04/Mint 14 and
>>> bdb/mdb.
>>>
>>> Remove the audit overlay or migrate back to 2.4.39 solves the problem.

Thanks, fixed now in master.


-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 4 Howard Chu 2014-12-15 14:54:45 UTC
changed notes
changed state Open to Test
moved from Incoming to Software Bugs
Comment 5 Quanah Gibson-Mount 2014-12-15 17:09:43 UTC
changed notes
changed state Test to Release
Comment 6 OpenLDAP project 2015-07-02 17:46:01 UTC
fixed in master
fixed in RE25
fixed in RE24
Comment 7 Quanah Gibson-Mount 2015-07-02 17:46:01 UTC
changed notes
changed state Release to Closed