[Date Prev][Date Next] [Chronological] [Thread] [Top]

ACL filter causes segmentation fault bug (ITS#2027)

Full_Name: Curtis J Blank
Version: 2.0.23 & 2.0.25
OS: Linux 2.4.18
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (

The substring filter search in this ACL causes a segmentation fault when there
is a match, or when the daemon is started with a "-d -1". It occurs in 2.0.23
and 2.0.25.

This is the ACL:

defaultaccess none
access to
                * read

Here is the tail of the output from a "slapd -d -1":

line 28 (pidfile                /var/run/slapd.pid)
line 29 (argsfile       /var/run/slapd.args)
line 54 (include                /etc/openldap/schema/slapd.aci.conf)
reading config file /etc/openldap/schema/slapd.aci.conf
line 1 (defaultaccess none)
line 6 (access to       filter=(employeeType=*S*) by    * read)
str2filter "(employeeType=*S*)"
str2filter: simple
str2simple "employeeType=*S*"
str2subvals "*S*"
Global ACL: access to filter=(employeeType=Segmentation fault
mailtb:/data01/openldap/schema #

This is an addendum to #2023 since I couldn't figure out how to add to it.

-Curt Blank