Issue 7930 - slapo-chain causes double-free with rwm
Summary: slapo-chain causes double-free with rwm
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-09-06 08:11 UTC by Howard Chu
Modified: 2014-10-23 07:34 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this issue.
Description Howard Chu 2014-09-06 08:11:13 UTC 
Full_Name: Howard Chu
Version: RE24
OS: 
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (78.155.233.73)
Submitted by: hyc


chaining substitutes op->o_req_dn and then restores its original value after
performing the chained op. But rwm tries to cleanup op->o_req_dn when the
chained op finishes, and so the original DN will be invalid after that.

Partial fix: chain should only resto t the original value if the current value
matches
the last value that chain used.

Additional fix: rwm should not cleanup at this time, because the
send_ldap_result() of the chained op is not necessarily the final result of the
original op. (E.g., in a search that processes multiple search refs,
send_ldap_result will occur for each ref that is chained.)
Comment 1 Howard Chu 2014-09-06 11:13:36 UTC 
changed notes
changed state Open to Test
moved from Incoming to Software Bugs
Comment 2 Quanah Gibson-Mount 2014-09-08 16:35:46 UTC 
changed notes
changed state Test to Release
Comment 3 OpenLDAP project 2014-10-23 07:34:23 UTC 
fixed in master
fixed in RE25
fixed in RE24
Comment 4 Quanah Gibson-Mount 2014-10-23 07:34:23 UTC 
changed notes
changed state Release to Closed