[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#7150) SEGFAULT in openldap-2.4.28 & 2.4.29



Here it is.





Program terminated with signal 11, Segmentation fault.
#0  0x0818d9c2 in syncprov_op_mod (op=0x89b2fe0, rs=0x8c9b1108) at
syncprov.c:2118
2118                                            for ( m2 = mt->mt_mods;
m2->mi_next != mi;
(gdb) bt full
#0  0x0818d9c2 in syncprov_op_mod (op=0x89b2fe0, rs=0x8c9b1108) at
syncprov.c:2118
        m2 = 0x0
        mt = 0x89cd028
        mtdummy = {mt_mods = 0x889e468, mt_tail = 0x89b2fe0, mt_op =
0x89b2fe0, mt_mutex = {__data = {__lock = 48,
              __count = 2358971544, __owner = 135135137, __kind =
144388064, __nusers = 2358972680, {__spins = 16843008,
                __list = {__next = 0x1010100}}},
            __size =
"0\000\000\000\230\f\233\214\241\377\r\b\340/\233\b\b\021\233\214\000\001\001\001",
__align = 48}}
        mi = 0x8bcae2a0
        on = <value optimized out>
        si = 0x87cbfa0
        cb = 0x8bcae258
        opc = 0x8bcae268
        have_psearches = 1
#1  0x080dff34 in overlay_op_walk (op=0x89b2fe0, rs=0x8c9b1108,
which=op_add, oi=0x87c98a8, on=0x87cbe98) at backover.c:661
        rc = 144388064
#2  0x080e049a in over_op_func (op=0x89b2fe0, rs=0x8c9b1108,
which=op_add) at backover.c:723
        oi = 0x87c98a8
        on = 0x87cbe98
        be = 0x8793c48
        db = {bd_info = 0x87cbe98, bd_self = 0x8793c48,
          be_ctrls =
"\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001\000\000\000\001\001",
'\000' <repeats 12 times>, "\001", be_flags = 563464, be_restrictops =
0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0,
            sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0,
sss_update_transport = 0, sss_update_tls = 0,
            sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix =
0x87c93f8, be_nsuffix = 0x8796f70, be_schemadn = {
            bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0,
bv_val = 0x0}, be_rootdn = {bv_len = 24,
            bv_val = 0x87c8b30 "cn=Manager,dc=afp,dc=com"}, be_rootndn =
{bv_len = 24,
            bv_val = 0x87c8d40 "cn=manager,dc=afp,dc=com"}, be_rootpw =
{bv_len = 38,
            bv_val = 0x87961f8
"{SSHA}rEmMhg3MU5xkQX5Ng92tH4WzGMlA+nGU"}, be_max_deref_depth = 15,
be_def_limit = {
            lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 15000,
lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0,
            lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits =
0x87cbe40, be_acl = 0x0, be_dfltaccess = ACL_READ,
          be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0, bv_val =
0x0}, be_update_refs = 0x0,
          be_pending_csn_list = 0x889b1a0, be_pcl_mutex = {__data =
{__lock = 0, __count = 0, __owner = 0, __kind = 0,
              __nusers = 0, {__spins = 0, __list = {__next = 0x0}}},
__size = '\000' <repeats 23 times>, __align = 0},
          be_syncinfo = 0x87cc1c8, be_pb = 0x0, be_cf_ocs = 0x8212020,
be_private = 0x8793d48, be_next = {
            stqe_next = 0x87cc050}}
        cb = {sc_next = 0x0, sc_response = 0x80dfce0
<over_back_response>, sc_cleanup = 0, sc_private = 0x87c98a8}
        sc = <value optimized out>
        rc = <value optimized out>
        __PRETTY_FUNCTION__ = "over_op_func"
#3  0x0807eeb9 in fe_op_add (op=0x89b2fe0, rs=0x8c9b1108) at add.c:334
        repl_user = 0
        rc = <value optimized out>
        bd = 0x8215ca0
        textbuf =
"\000\000\000\000\210\032\234\b0\033\233\214@q(\000\030\000\000\000\000\000\000\000\"\203%\000\b\241%\000\270\255\234\b\030lv\b\002\000\000\000\250\016\233\214-[\v\b\270\255\234\b\224\016\233\214\001\000\000\000\000\000\000\000\340i\234\b\000\000\000\000\n\000\000\000\001\000\000\000\270\027v\b\n\000\000\000\310\f\234\b\320\032\234\b\030lv\b\270\255\234\b\370\016\233\214O>\t\b\002\000\000\000\030Vt\b\370\016\233\214\261:\t\b@et\bpu\234\b'<\202\000\000\000\000\000\f\000\000\000\227V\235\b\207~\000\000\224\225d\000\300rv\b\300rv\b\370\016\233\214\335Pa\000\000V!\b,I\337\215\030\017\233\214\325\020\b\b\000V!\bpu\234\b\000\000\000\000\270\255\234\b\200H\337\215\000\000\000\000H\017\233\214G\353\a\b\300rv\b\300rv\b\001\000\000\---Type
<return> to continue, or q <return> to quit---
000H\017\233\214\020\000\000\000@I\337\215\377\377\377\377"
        __PRETTY_FUNCTION__ = "fe_op_add"
#4  0x0807f7a3 in do_add (op=0x89b2fe0, rs=0x8c9b1108) at add.c:194
        ber = <value optimized out>
        last = 0x89d56b1 ""
        dn = {bv_len = 38, bv_val = 0x89d55d8
"uid=dcoutadeur,ou=People,dc=afp,dc=com"}
        len = 28
        tag = <value optimized out>
        modlist = 0x89ce650
        modtail = 0x89becbc
        tmp = {sml_mod = {sm_desc = 0x80cb2aa, sm_values = 0x89c7570,
sm_nvalues = 0x0, sm_numvals = 2358972600, sm_op = 0,
            sm_flags = 0, sm_type = {bv_len = 12, bv_val = 0x89d5697
"userPassword"}}, sml_next = 0x823c27}
        textbuf =
"\000\000\000\000\000\000\000\000X\360\233\b\006\240\031\000\240\261\211\b\000\000\000\000\000\000\000\000@q(\000\000\000\000\000\000\000\000\000\060X\234\b\310\301|\b\000\000\000\000Te\031\000\000\000\000\000@q(\000\364_(\000\220\033\233\214\000\000\000\000\313Ø?\b\240\375\233\b\370\017\233\214T\213\202\000b\213\202\000;\334\022\000/\000\000\000\313Ø?\b\b\000\000\000\201\254\031\000\f\020\233\214<\004\023\000\270\020\233\214\312\315\022\000\260
\233\b\313Ø?\b\b\000\000\000\001\200\255\373\340\060\233\b\340\060\233\b\340\060\233\b\340\060\233\b\356\060\233\b\337\061\233\b\340\060\233\b\337\061\233\b,\000\000\000@q(",
'\000' <repeats 13 times>,
"\001\000\000\000\000\000\000\000\060\000\000\000\000\000\000\b", '\000'
<repeats 16 times>,
"\030X\234\b\000\000\000\000\001\000\000\000\004\000\020\000\350\021\233\214\310\020\233\214"
        rc = <value optimized out>
        freevals = <value optimized out>
        oex = {oe = {oe_next = {sle_next = 0x0}, oe_key = 0x807f0c0},
oe_db = 0x0}
#5  0x0807759d in connection_operation (ctx=0x8c9b11e8, arg_v=0x89b2fe0)
at connection.c:1138
        rc = <value optimized out>
        cancel = <value optimized out>
        rs = {sr_type = REP_RESULT, sr_tag = 0, sr_msgid = 0, sr_err =
0, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0,
          sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0,
r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x0,
              r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata =
0x0}, sru_extended = {r_rspoid = 0x0,
              r_rspdata = 0x0}}, sr_flags = 0}
        tag = 104
        opidx = SLAP_OP_ADD
        conn = 0xb7efd014
        memctx = 0x89b3358
        memctx_null = 0x0
        __PRETTY_FUNCTION__ = "connection_operation"
#6  0x08077f6d in connection_read_thread (ctx=0x8c9b11e8, argv=0x2f) at
connection.c:1274
        s = <value optimized out>
#7  0x006145e4 in ldap_int_thread_pool_wrapper (xpool=0x87687a8) at
tpool.c:685
        task = 0x89b2970
        work_list = <value optimized out>
        ctx = {ltu_id = 2358975376, ltu_key = {{ltk_key = 0x8076270,
ltk_data = 0x89b3268,
              ltk_free = 0x8076340 <conn_counter_destroy>}, {ltk_key =
0x80cb0e0, ltk_data = 0x89b3358,
              ltk_free = 0x80cb110 <slap_sl_mem_destroy>}, {ltk_key =
0x889b1b0, ltk_data = 0x89b78b0,
              ltk_free = 0x8125cf0 <bdb_reader_free>}, {ltk_key =
0x808b900, ltk_data = 0x0,
              ltk_free = 0x808b710 <slap_op_q_destroy>}, {ltk_key =
0x889ebe0, ltk_data = 0x89b9f78,
              ltk_free = 0x8125cf0 <bdb_reader_free>}, {ltk_key = 0x0,
ltk_data = 0x0, ltk_free = 0} <repeats 27 times>}}
        kctx = <value optimized out>
        keyslot = 242
        hash = 5209330
---Type <return> to continue, or q <return> to quit---
        __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper"
#8  0x00821832 in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#9  0x0020346e in clone () from /lib/libc.so.6
No symbol table info available.










Le 03/02/2012 18:15, Howard Chu a écrit :
> david.coutadeur@linagora.com wrote:
>> I have reproduced the bug with a fresh new HEAD version yesterday,
>> including :
>> 02/02/2012    Howard Chu  ITS#7146 fix prev commit
> 
> Can you include a "bt full" gdb backtrace on this?
> 
>> Le 02/02/2012 20:25, Michael Ströder a écrit :
>>> dcoutadeur@linagora.com wrote:
>>>> I have encountered a bug on openldap 2.4.28 and openldap 2.4.29 (ie git
>>>> version)
>>>
>>> Which exact git version? Did you build RE24 from git already containing
>>> the fix for ITS#7113 (dup of ITS#6928)?
>