Issue 6445 - Duplicate free with back-relay + passwd op
Summary: Duplicate free with back-relay + passwd op
Status: VERIFIED WORKSFORME
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: backends (show other issues)
Version: unspecified
Hardware: All All
: High normal
Target Milestone: 2.6.0
Assignee: Howard Chu
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-01-07 17:42 UTC by Hallvard Furuseth
Modified: 2021-07-20 19:36 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description Hallvard Furuseth 2010-01-07 17:42:20 UTC
Full_Name: Hallvard B Furuseth
Version: HEAD
OS: Linux
URL: 
Submission from: (NULL) (129.240.6.233)
Submitted by: hallvard


HEAD configured with CPPFLAGS=-DSLAP_NO_SL_MALLOC
./run test030-relay  with slapd under valgrind
Bad frees of op->o_req_ndn.bv_val and op->o_req_dn.bv_val:

    Invalid slap_sl_free()
       by 0x4864F1: do_extended (extended.c:187)
     Address 0xd8853a0 is 0 bytes inside a block of size 62 free'd
       by 0x487DAC: passwd_extop (passwd.c:321)
       by 0x486712: fe_extended (extended.c:225)
       by 0x486491: do_extended (extended.c:180)
    
    Invalid slap_sl_free()
       by 0x486515: do_extended (extended.c:189)
     Address 0xd8855d0 is 0 bytes inside a block of size 62 free'd
       by 0x487DFF: passwd_extop (passwd.c:325)
       by 0x486712: fe_extended (extended.c:225)
       by 0x486491: do_extended (extended.c:180)

The four backtraces are surrounded by:
       at 0x4A05A31: free (vg_replace_malloc.c:325)
       by 0x4E707E5: ber_memfree_x (memory.c:152)
       by 0x4B7157: slap_sl_free (sl_malloc.c:481)
       <...backtrace above...>
       by 0x4444F8: connection_operation (connection.c:1109)
       by 0x444A7D: connection_read_thread (connection.c:1245)
       by 0x4C1AFE2: ldap_int_thread_pool_wrapper (tpool.c:685)
Comment 1 Quanah Gibson-Mount 2017-03-28 00:10:18 UTC
moved from Incoming to Software Bugs
Comment 2 Howard Chu 2021-07-20 18:59:34 UTC
Unable to reproduce. Probably fixed by df2573b4a91462031782bc7da84776b7c9e1583a ITS#6632