RE : Crash in SASL bind (ITS#2577)

[Kurt@OpenLDAP.org]

This should now be fixed in HEAD.

Kurt

At 11:55 PM 6/9/2003, emmanuel.duru@atosorigin.com wrote:

>(gdb) where
>#0  0xff0a9794 in __sigprocmask () from /usr/lib/libthread.so.1
>#1  0xff09e9a8 in _resetsig () from /usr/lib/libthread.so.1
>#2  0xff09e148 in _sigon () from /usr/lib/libthread.so.1
>#3  0xff0a1188 in _thrp_kill () from /usr/lib/libthread.so.1
>#4  0xff14b760 in raise () from /usr/lib/libc.so.1
>#5  0xff135a84 in abort () from /usr/lib/libc.so.1
>#6  0x221348 in Letext ()
>#7  0x63858 in access_allowed (op=0xfd0014d8, e=0x409f78, desc=0x0,
>val=0x0, 
>    access=ACL_SEARCH, state=0x0) at acl.c:131
>#8  0x629e8 in test_presence_filter (op=0xfd0014d8, e=0x409f78,
>desc=0x0) at filterentry.c:499
>#9  0x6207c in test_filter (op=0xfd0014d8, e=0x409f78, f=0x280460) at
>filterentry.c:107
>#10 0x8bd74 in bdb_do_search (op=0xfd0014d8, rs=0xfd001490,
>sop=0xfd0014d8, ps_e=0x0, 
>    ps_type=0) at search.c:1107
>#11 0x8a7e8 in bdb_search (op=0xfd0014d8, rs=0xfd001490) at search.c:357
>#12 0x7c1fc in slap_auxprop_lookup (glob_context=0x0, sparams=0x30,
>flags=0, 
>    user=0x308c89 "putois@rahil", ulen=12) at sasl.c:450
>#13 0xff3642a8 in _sasl_auxprop_lookup (sparams=0x308db0, flags=0, 
>    user=0x308c89 "putois@rahil", ulen=12) at auxprop.c:863
>#14 0xff364794 in _sasl_canon_user (conn=0x308278, user=0x308c89
>"putois@rahil", ulen=12, 
>    flags=1, oparams=0x308ad8) at canonusr.c:190
>#15 0xfe7a4224 in digestmd5_server_mech_step2 (stext=0x409a70,
>sparams=0x308db0, 
>    clientin=0xc4 <Address 0xc4 out of bounds>, clientinlen=184,
>serverout=0xfd0019b4, 
>    serveroutlen=0xfd0019a0, oparams=0x308ad8) at digestmd5.c:2391
>#16 0xfe7a4da0 in digestmd5_server_mech_step (conn_context=0x409a70,
>sparams=0x308db0, 
>    clientin=0x309618
>"username=\"putois@rahil\",realm=\"rahil.sc.atosorigin.com\",authzid=\"d
>n:cn=user2,ou=people,o=sota\",nonce=\"Fm2USFoWKCIHzGmu5ecg0hmpdY1d8y216g
>B8L21Zje4=\",cnonce=\"Fm2USFoWKCIHzGmu5ecg0hmpdY1d8y216gB8L21Zje4="...,
>clientinlen=319, serverout=0xfd0019b4, 
>    serveroutlen=0xfd0019a0, oparams=0x308ad8) at digestmd5.c:2779
>#17 0xff36de94 in sasl_server_step (conn=0x308278, 
>    clientin=0x309618
>"username=\"putois@rahil\",realm=\"rahil.sc.atosorigin.com\",authzid=\"d
>n:cn=user2,ou=people,o=sota\",nonce=\"Fm2USFoWKCIHzGmu5ecg0hmpdY1d8y216g
>B8L21Zje4=\",cnonce=\"Fm2USFoWKCIHzGmu5ecg0hmpdY1d8y216gB8L21Zje4="...,
>clientinlen=319, serverout=0xfd0019b4, 
>    serveroutlen=0xfd0019a0) at server.c:1259
>#18 0x7d57c in slap_sasl_bind (op=0x3094f8, rs=0xfd001ad8) at
>sasl.c:1386
>#19 0x60c84 in do_bind (op=0x3094f8, rs=0xfd001ad8) at bind.c:295
>#20 0x4d3f0 in connection_operation (ctx=0xfd001b80, arg_v=0x3094f8) at
>connection.c:943
>#21 0xca234 in ldap_int_thread_pool_wrapper (xpool=0x2ae0a8) at
>tpool.c:463
>
>-----Message d'origine-----
>De : Kurt D. Zeilenga [mailto:Kurt@OpenLDAP.org] 
>Envoyé : jeudi 5 juin 2003 22:15
>À : emmanuel.duru@atosorigin.com
>Cc : openldap-its@OpenLDAP.org
>Objet : Re: Crash in SASL bind (ITS#2577)
>
>
>Please provide a stack back trace from the crash.  Thanks, Kurt
>
>At 12:46 AM 6/5/2003, emmanuel.duru@atosorigin.com wrote:
>>Full_Name: Emmanuel Duru
>>Version: 2.2.0 alpha
>>OS: solaris 8
>>URL: ftp://ftp.openldap.org/incoming/
>>Submission from: (NULL) (195.68.44.148)
>>
>>
>>In 2.2.0 alpha (20030531), when a client SASL binds to the server, the
>server
>>crashes, because sasl.c uses a filter with a null attribute descriptor.
>>The problem is that the generic_filter used is initialized in
>slap_sasl_init()
>>from the schema, which is not yet loaded: slap_schema_init() is called
>in main.c
>>after slap_init(), slap-init() calls slap_sasl_init().
>>Proposed correction : move the slap_sasl_init() call from slap_init()
>to main(),
>>after slap_schema_init().