Issue 6464 - Buffer overflow
Summary: Buffer overflow
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: 2.4.21
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-01-28 13:33 UTC by csdr@lthd.com
Modified: 2017-03-28 00:11 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description csdr@lthd.com 2010-01-28 13:33:50 UTC
Full_Name: Chis-Serban Dinu-Razvan
Version: 2.4.21
OS: Fedora 12
URL: http://lthd.com/out1.txt
Submission from: (NULL) (193.231.233.40)


I have a master ldap server running openldap 2.4.21 and 3 replicas running
2.4.15 and 2.4.19 and I when I try to delete/rename an object, the master dies
with an buffer overflow error. I mention that before the master was 2.4.15 and
the replica running 2.4.19 died. I have updated the master to 2.4.19 and it
start dyeing. Then I upgraded it to 2.4.21 an it still dies. It dies even if the
syncprov is off.
Comment 1 Howard Chu 2010-01-30 23:05:26 UTC
csdr@lthd.com wrote:
> Full_Name: Chis-Serban Dinu-Razvan
> Version: 2.4.21
> OS: Fedora 12
> URL: http://lthd.com/out1.txt
> Submission from: (NULL) (193.231.233.40)
>
>
> I have a master ldap server running openldap 2.4.21 and 3 replicas running
> 2.4.15 and 2.4.19 and I when I try to delete/rename an object, the master dies
> with an buffer overflow error. I mention that before the master was 2.4.15 and
> the replica running 2.4.19 died. I have updated the master to 2.4.19 and it
> start dyeing. Then I upgraded it to 2.4.21 an it still dies. It dies even if the
> syncprov is off.
>
Please provide a stack trace from this crash. Be sure to compile with debug 
symbols enabled and no optimization, otherwise we won't be able to track 
anything down.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 2 csdr@lthd.com 2010-02-01 09:54:00 UTC
Sorry.
I hope this helps: http://lthd.com/slapd.out

On 01/31/2010 01:05 AM, Howard Chu wrote:
> csdr@lthd.com wrote:
>> Full_Name: Chis-Serban Dinu-Razvan
>> Version: 2.4.21
>> OS: Fedora 12
>> URL: http://lthd.com/out1.txt
>> Submission from: (NULL) (193.231.233.40)
>>
>>
>> I have a master ldap server running openldap 2.4.21 and 3 replicas 
>> running
>> 2.4.15 and 2.4.19 and I when I try to delete/rename an object, the 
>> master dies
>> with an buffer overflow error. I mention that before the master was 
>> 2.4.15 and
>> the replica running 2.4.19 died. I have updated the master to 2.4.19 
>> and it
>> start dyeing. Then I upgraded it to 2.4.21 an it still dies. It dies 
>> even if the
>> syncprov is off.
>>
> Please provide a stack trace from this crash. Be sure to compile with 
> debug symbols enabled and no optimization, otherwise we won't be able 
> to track anything down.
>

Comment 3 Ralf 2010-02-17 00:22:14 UTC
> Sorry.
> I hope this helps: http://lthd.com/slapd.out
Hm, that's not a stack backtrace
(http://www.openldap.org/faq/index.cgi?file=59), but not apart from that, it 
looks like you are hit by ITS#6474. Please test again with current HEAD. Or
apply the changes between 
1.168 and 1.169 of servers/slapd/back-bdb/dn2id.c from CVS  to your 2.4.21
release:

http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/dn2id.c.diff?
r1=1.168&r2=1.169&hideattic=1&sortbydate=0&f=h

-- 
Ralf
Comment 4 Ralf 2010-02-17 00:23:31 UTC
changed notes
Comment 5 Ralf 2010-02-17 00:23:41 UTC
changed notes
Comment 6 csdr@lthd.com 2010-02-17 10:56:28 UTC
Well .. it worked.

Here are that stack traces if you need them anymore (I thought strace 
did that) ...

http://www.lthd.com/thread_apply_all_bt.txt
and
http://www.lthd.com/bt_full.txt

Thank you.

PS: I am surprised that none has encountered that bug which comes from 
version 2.4.19 (AFAIK)

Comment 7 Ralf 2010-02-17 14:06:56 UTC
Am Mittwoch 17 Februar 2010 11:57:27 schrieb csdr@lthd.com:
> Well .. it worked.
> 
> Here are that stack traces if you need them anymore (I thought strace
> did that) ...
> 
> http://www.lthd.com/thread_apply_all_bt.txt
> and
> http://www.lthd.com/bt_full.txt
> 
> Thank you.
> 
> PS: I am surprised that none has encountered that bug which comes from
> version 2.4.19 (AFAIK)
This problem only appears when using pretty recent gcc Versions and when 
building with -D_FORTIFY_SOURCE=2 (At least for me).

-- 
Ralf

Comment 8 ando@openldap.org 2010-04-17 15:29:39 UTC
changed state Open to Suspended
Comment 9 OpenLDAP project 2017-03-28 00:11:48 UTC
Dup of ITS#6474?
Closing due to lack of followup from reporter.
Comment 10 Quanah Gibson-Mount 2017-03-28 00:11:48 UTC
changed notes
changed state Suspended to Closed
moved from Incoming to Software Bugs