[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#5687) corrupted double-linked list on shutdown

ando@sys-net.it wrote:

> It seems that rwm_op_cleanup() frees the massaged DN but does not 
> restore the original values, since do_search frees it again.  I guess 
> the dn does get massaged, since r_dn is not null.

The problem is in glue_op_search(): it saves a copy of the rewritten DN; 
in case of CTRL^C, the rewritten DN is deleted by rwm_op_cleanup, and a 
dangling pointer to it is later restored in o_req_[n]dn by 
glue_op_search (lines 446-7 or 463-4).  Trying to fix it...


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it