Re: (ITS#3498) back-meta segfault when deleting seeAlso

[ando@sys-net.it]

Your analysis appears to be correct.  A fix is in HEAD, I plan to fix re22
in a minute.  The problem should not impact the rwm overlay, which is used
in 2.3/HEAD by back-ldap/back-relay for the same purpose.

p.

> Full_Name: Raphael Ouazana
> Version: 2.2.20 and 2.3.0alpha
> OS: Linux
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (194.98.7.155)
>
>
>
> When I delete the attribute seeAlso of an entry through back-meta, slapd
> segfault.
>
> There is the backtrace for OpenLDAP-2.3.0alpha :
>
> conn=0 op=1 MOD attr=seeAlso
>
> Program received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 16387 (LWP 8266)]
> 0x080a1058 in ldap_dnattr_rewrite (dc=0x409be55c, a_vals=0x0) at map.c:645
> 645             for ( last = 0; a_vals[last].bv_val != NULL; last++ );
> (gdb) bt
> #0  0x080a1058 in ldap_dnattr_rewrite (dc=0x409be55c, a_vals=0x0) at
> map.c:645
> #1  0x08094e15 in meta_back_modify (op=0x818d5b0, rs=0x409bf87c)
>     at modify.c:117
> #2  0x08066863 in fe_op_modify (op=0x818d5b0, rs=0x409bf87c) at
> modify.c:461
> #3  0x080660cc in do_modify (op=0x818d5b0, rs=0x409bf87c) at modify.c:202
> #4  0x08056181 in connection_operation (ctx=0x409bf8fc, arg_v=0x818d5b0)
>     at connection.c:1038
> #5  0x080b085b in ldap_int_thread_pool_wrapper (xpool=0x8137f28) at
> tpool.c:467
> #6  0x40136941 in pthread_start_thread () from /lib/i686/libpthread.so.0
> #7  0x40136a45 in pthread_start_thread_event () from
> /lib/i686/libpthread.so.0
>
> It is about the same in OpenLDAP-2.2.20.
>
> ldap_dnattr_rewrite seems not to check if a_vals is NULL...
>
> Raphaël Ouazana.
>
>
>


-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497