[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#7414) rwm: ldapmodify, slapd segmentation fault



Full_Name: Jan Vcelak
Version: 2.4.33
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (209.132.186.34)


Hello,

it is possible to crash slapd in certain configuration with rwm overlay enabled,
using specific ldapmodify. This problem seems to be present for a very long
time.

Configuration used (slapd.ldif):

dn: cn=config
objectClass: olcGlobal
cn: config
olcArgsFile: /var/run/openldap/slapd.args
olcPidFile: /var/run/openldap/slapd.pid

dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModulepath: /usr/lib64/openldap
olcModuleload: rwm.la

dn: cn=schema,cn=config
objectClass: olcSchemaConfig
cn: schema

include: file:///etc/openldap/schema/core.ldif
include: file:///etc/openldap/schema/cosine.ldif
include: file:///etc/openldap/schema/inetorgperson.ldif

dn: olcDatabase=frontend,cn=config
objectClass: olcDatabaseConfig
olcDatabase: frontend

dn: olcDatabase=hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: hdb
olcSuffix: dc=my-domain,dc=com
olcRootDN: cn=Manager,dc=my-domain,dc=com
olcRootPW: secret
olcDbDirectory: /var/lib/ldap
olcDbIndex: objectClass eq,pres
olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub

dn: olcOverlay=rwm,olcDatabase={1}hdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcRwmConfig
olcOverlay: rwm
olcRwmRewrite: {0}rwm-rewriteEngine "on"
olcRwmRewrite: {1}rwm-rewriteContext "bindDN"
olcRwmRewrite: {2}rwm-rewriteRule "cn=([a-z]+),ou=People,dc=my-domain,dc=com"
"uid=$1,ou=People,dc=my-domain,dc=com"


Set up and start the server. Add the initial data:

dn: dc=my-domain,dc=com
objectClass: dcObject
objectClass: organizationalUnit
description: Root LDAP entry
dc: my-domain
ou: rootobject

dn: cn=Manager,dc=my-domain,dc=com
objectClass: organizationalRole
cn: Manager

dn: ou=People,dc=my-domain,dc=com
objectClass: top
objectClass: organizationalunit
ou: People

dn: cn=test1,ou=People,dc=my-domain,dc=com
objectClass: inetOrgPerson
cn: test1
sn: test


Perform following modify operation:

dn: cn=test1,ou=People,dc=my-domain,dc=com
changetype: modrdn
newrdn: cn=test2
deleteoldrdn: 1
newsuperior: ou=People,dc=my-domain,dc=com


The slapd daemon will crash, here is the full backtrace:

#0  rwm_op_rollback (op=op@entry=0x7fffe8000930, ros=0x7fffe8001738,
rs=<optimized out>) at rwm.c:110
No locals.
#1  0x00007ffff210f1c2 in rwm_op_cleanup (op=0x7fffe8000930, rs=<optimized out>)
at rwm.c:165
        cb = 0x7fffe8001718
        ros = <optimized out>
#2  0x00005555555a606b in slap_cleanup_play (op=op@entry=0x7fffe8000930,
rs=rs@entry=0x7ffff1106930) at result.c:541
        sc_next = 0x7ffff11065c0
        sc_nextp = 0x7fffe8001718
        sc = 0x7fffe8001718
        scp = 0x7ffff1106018
#3  0x00005555555a6573 in send_ldap_response (op=op@entry=0x7fffe8000930,
rs=rs@entry=0x7ffff1106930) at result.c:733
        berbuf = {
          buffer = "\000\000\001\000\001\000\000\000\377\377\377\377\377\377\377\377",
'\000' <repeats 24 times>,
"F\030\000\350\377\177\000\000\024(\000\350\377\177\000\000\000\000\000\000\000\000\000\000F\030\000\350\377\177\000\000\320\016\000\350\377\177\000\000P\373\275UUU\000\000\200v\357\367\377\177\000\000\001\000\000\000hw\001",
'\000' <repeats 17 times>"\266, \252r\367\377\177", '\000' <repeats 11 times>,
"a\370<\316m]\037\200*\227\367\377\177\000\000\001\000\000\000UU\000\000\321\323vP\000\000\000\000\350\n\000\350\377\177\000\000\003",
'\000' <repeats 23 times>"\225,
\362\227\367\311\362\245\303\000\000\000\000\000\000\000\000+\246fUUU\000\000\030Ó¿UUU\000\000\223\204+\366\377\177\000\000\060\065\020\350\377\177\000\000\000a\370<\316m]\037",
ialign = 65536, lalign = 4295032832, 
          falign = 9.18354962e-41, dalign = 2.1220281700514382e-314, palign =
0x100010000 <Address 0x100010000 out of bounds>}
        ber = <optimized out>
        rc = 32768
        bytes = <optimized out>
        __PRETTY_FUNCTION__ = "send_ldap_response"
#4  0x00005555555a7126 in slap_send_ldap_result (op=0x7fffe8000930,
rs=0x7ffff1106930) at result.c:860
        tmp = 0x0
        otext = 0x0
        oref = 0x0
        __PRETTY_FUNCTION__ = "slap_send_ldap_result"
#5  0x0000555555621a50 in hdb_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at
modrdn.c:789
        bdb = 0x5555559fa4f0
        children = 0x55555599d260
        entry = 0x55555599cfc0
        p_dn = {bv_len = 29, bv_val = 0x7fffe8102399
"ou=People,dc=my-domain,dc=com"}
        p_ndn = {bv_len = 29, bv_val = 0x7fffe81023c9 ""}
        new_dn = {bv_len = 38, bv_val = 0x0}
        new_ndn = {bv_len = 38, bv_val = 0x0}
        e = <optimized out>
        p = <optimized out>
        ei = 0x7fffe8103f00
        eip = 0x7fffe410a0a0
        nei = 0x7fffe410a0a0
        neip = 0x0
        textbuf = "0\t\000\350\377\177\000\000\000e\020\361\377\177\000\000
i\237UUU\000\000\230\060\021\362\377\177\000\000\200\241^\366\377\177\000\000\000\000\000\000\316m]\037&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000\060\t\000\350\377\177\000\000\070\027\000\350\377\177\000\000\000\000\000\000\000\000\000\000)\323\020\362\377\177\000\000&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000&\000\000\000\000\000\000\000\270\022\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000\000\314X\021\362\377\177\000\000\060i\020\361\377\177\000\000\030\027\000\350\377\177\000\000\030\027\000\350\377\177\000\000\060i\020\361\377\177\000\000\332\326\020\362\377\177\000\000\360d\020\361\377\177\000\000\020e\020\361\377\177\000\000\b\000\000\000\000\000\000\000\270\023\000\350\377\177\000\000\b\000\000\000\000\000\000\000\350\023\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000"
        ltid = 0x0
        lt2 = 0x7fffe81068f0
        opinfo = {boi_oe = {oe_next = {sle_next = 0x0}, oe_key = 0x0}, boi_txn =
0x7fffe8106730, boi_locks = 0x0, boi_err = 0, 
          boi_acl_cache = 0 '\000', boi_flag = 0 '\000'}
        dummy = {e_id = 4, e_name = {bv_len = 38, bv_val = 0x7fffe8106890
"cn=test2,ou=People,dc=my-domain,dc=com"}, e_nname = {
            bv_len = 38, bv_val = 0x7fffe81068c0
"cn=test2,ou=people,dc=my-domain,dc=com"}, e_attrs = 0x0, e_ocflags = 256, e_bv
= {
            bv_len = 0, bv_val = 0x0}, e_private = 0x7fffe8103f00}
        np = <optimized out>
        np_dn = <optimized out>
        np_ndn = <optimized out>
        new_parent_dn = <optimized out>
        manageDSAit = 0
        lock = {off = 164424, ndx = 98, gen = 2, mode = DB_LOCK_WRITE}
        plock = {off = 157848, ndx = 932, gen = 2, mode = DB_LOCK_READ}
        nplock = {off = 0, ndx = 1436511616, gen = 21845, mode = 4044383224}
        num_retries = 0
        preread_ctrl = 0x0
        postread_ctrl = 0x0
        ctrls = {0x0, 0x555555a2ea00, 0x0, 0x7ffff11064a0, 0x7ffff1106480,
0x7ffff1106450}
        num_ctrls = 0
        rc = <optimized out>
        parent_is_glue = 0
        parent_is_leaf = 1
        __PRETTY_FUNCTION__ = "hdb_modrdn"
#6  0x0000555555603c96 in overlay_op_walk (op=op@entry=0x7fffe8000930,
rs=0x7ffff1106930, which=op_modrdn, oi=0x5555559f76b0, on=0x0)
    at backover.c:671
        func = <optimized out>
        rc = 32768
#7  0x0000555555603deb in over_op_func (op=0x7fffe8000930, rs=<optimized out>,
which=<optimized out>) at backover.c:723
        oi = <optimized out>
        on = <optimized out>
        be = 0x5555559fa350
        db = {bd_info = 0x5555558e3620, bd_self = 0x5555559fa350, 
          be_ctrls =
"\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001", '\000' <repeats
17 times>, "\001", 
          be_flags = 2312, be_restrictops = 0, be_requires = 0, be_ssf_set =
{sss_ssf = 0, sss_transport = 0, sss_tls = 0, 
            sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0,
sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, 
          be_suffix = 0x555555a1df40, be_nsuffix = 0x555555a1df70, be_schemadn =
{bv_len = 0, bv_val = 0x0}, be_schemandn = {
            bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 30, bv_val =
0x555555a1e010 "cn=Manager,dc=my-domain,dc=com"}, 
          be_rootndn = {bv_len = 30, bv_val = 0x555555a1e060
"cn=manager,dc=my-domain,dc=com"}, be_rootpw = {bv_len = 6, 
            bv_val = 0x555555a1dee0 "secret"}, be_max_deref_depth = 15,
be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, 
            lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr =
0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, 
          be_limits = 0x0, be_acl = 0x0, be_dfltaccess = ACL_READ,
be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, 
          be_update_refs = 0x0, be_pending_csn_list = 0x555555bdbd80,
be_pcl_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, 
              __nusers = 0, __kind = 0, __spins = 0, __list = {__prev = 0x0,
__next = 0x0}}, __size = '\000' <repeats 39 times>, 
            __align = 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs =
0x5555558e7ec0, be_private = 0x5555559fa4f0, be_next = {
            stqe_next = 0x0}}
        cb = {sc_next = 0x0, sc_response = 0x555555602ff0 <over_back_response>,
sc_cleanup = 0, sc_private = 0x5555559f76b0}
        sc = <optimized out>
        rc = 32768
        __PRETTY_FUNCTION__ = "over_op_func"
#8  0x00005555555b0f9c in fe_op_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at
modrdn.c:314
        repl_user = <optimized out>
        dest_ndn = {bv_len = 38, bv_val = 0x7fffe80016e8
"cn=test2,ou=people,dc=my-domain,dc=com"}
        dest_pndn = {bv_len = 29, bv_val = 0x7fffe80016c0
"ou=people,dc=my-domain,dc=com"}
        pdn = {bv_len = 0, bv_val = 0x0}
        op_be = 0x5555559fa350
        bd = 0x5555558ea2c0
        diff = <optimized out>
#9  0x00005555555b207e in do_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at
modrdn.c:186
        dn = {bv_len = 38, bv_val = 0x7fffe81065c7
"cn=test1,ou=People,dc=my-domain,dc=com"}
        newrdn = {bv_len = 8, bv_val = 0x7fffe81065ef "cn=test2"}
        newSuperior = {bv_len = 29, bv_val = 0x7fffe81065fc
"ou=People,dc=my-domain,dc=com"}
        deloldrdn = -1
        pnewSuperior = {bv_len = 29, bv_val = 0x7fffe8001658
"ou=People,dc=my-domain,dc=com"}
        nnewSuperior = {bv_len = 29, bv_val = 0x7fffe80016c0
"ou=people,dc=my-domain,dc=com"}
        length = 29
#10 0x0000555555595d21 in connection_operation (ctx=ctx@entry=0x7ffff1106b60,
arg_v=arg_v@entry=0x7fffe8000930) at connection.c:1150
        rc = 80
        cancel = <optimized out>
        op = 0x7fffe8000930
        rs = {sr_type = REP_RESULT, sr_tag = 109, sr_msgid = 2, sr_err = 0,
sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, 
          sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0, r_attr_flags =
0, r_operational_attrs = 0x0, r_attrs = 0x0, 
              r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0},
sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, 
          sr_flags = 0}
        tag = 108
        opidx = SLAP_OP_MODRDN
        conn = 0x555555a2ea00
        memctx = 0x7fffe8000ed0
        memctx_null = 0x0
        memsiz = 1048576
        __PRETTY_FUNCTION__ = "connection_operation"
#11 0x0000555555596079 in connection_read_thread (ctx=0x7ffff1106b60,
argv=<optimized out>) at connection.c:1286
        rc = <optimized out>
        cri = {op = 0x7fffe8000930, func = 0, arg = 0x0, ctx = <optimized out>,
nullop = <optimized out>}
        s = <optimized out>
#12 0x00007ffff7b997f3 in ldap_int_thread_pool_wrapper (xpool=0x5555559a1b60) at
tpool.c:688
        pool = 0x5555559a1b60
        task = 0x7fffec0008c0
        work_list = <optimized out>
        ctx = {ltu_id = 140737237776128, ltu_key = {{ltk_key = 0x555555593ee0,
ltk_data = 0x7fffe8000dc0, 
              ltk_free = 0x555555593fb0 <conn_counter_destroy>}, {ltk_key =
0x5555555edcc0, ltk_data = 0x7fffe8000ed0, 
              ltk_free = 0x5555555edce0 <slap_sl_mem_destroy>}, {ltk_key =
0x555555bdae00, ltk_data = 0x7fffe81010f0, 
              ltk_free = 0x555555648bb0 <bdb_reader_free>}, {ltk_key =
0x5555555aa480, ltk_data = 0x0, 
              ltk_free = 0x5555555aa3e0 <slap_op_q_destroy>}, {ltk_key = 0x0,
ltk_data = 0x0, ltk_free = 0} <repeats 28 times>}}
        kctx = <optimized out>
        keyslot = <optimized out>
        hash = <optimized out>
        __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper"
#13 0x00007ffff6e61d14 in start_thread (arg=0x7ffff1107700) at
pthread_create.c:309
        __res = <optimized out>
        pd = 0x7ffff1107700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737237776128,
5431369951291209288, 1, 140737354125312, 140737237776128, 23, 
                -5431349871756872120, -5431349957038737848}, mask_was_saved =
0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {
              prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#14 0x00007ffff632a67d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.
No symbol "bt" in current context.
#0  rwm_op_rollback (op=op@entry=0x7fffe8000930, ros=0x7fffe8001738,
rs=<optimized out>) at rwm.c:110
No locals.
#1  0x00007ffff210f1c2 in rwm_op_cleanup (op=0x7fffe8000930, rs=<optimized out>)
at rwm.c:165
        cb = 0x7fffe8001718
        ros = <optimized out>
#2  0x00005555555a606b in slap_cleanup_play (op=op@entry=0x7fffe8000930,
rs=rs@entry=0x7ffff1106930) at result.c:541
        sc_next = 0x7ffff11065c0
        sc_nextp = 0x7fffe8001718
        sc = 0x7fffe8001718
        scp = 0x7ffff1106018
#3  0x00005555555a6573 in send_ldap_response (op=op@entry=0x7fffe8000930,
rs=rs@entry=0x7ffff1106930) at result.c:733
        berbuf = {buffer =
"\000\000\001\000\001\000\000\000\377\377\377\377\377\377\377\377", '\000'
<repeats 24 times>, "F\030\000\350\377\177\000\000\024(\000\350\377\177\000\000\000\000\000\000\000\000\000\000F\030\000\350\377\177\000\000\320\016\000\350\377\177\000\000P\373\275UUU\000\000\200v\357\367\377\177\000\000\001\000\000\000hw\001",
'\000' <repeats 17 times>"\266, \252r\367\377\177", '\000' <repeats 11 times>,
"a\370<\316m]\037\200*\227\367\377\177\000\000\001\000\000\000UU\000\000\321\323vP\000\000\000\000\350\n\000\350\377\177\000\000\003",
'\000' <repeats 23 times>"\225,
\362\227\367\311\362\245\303\000\000\000\000\000\000\000\000+\246fUUU\000\000\030Ó¿UUU\000\000\223\204+\366\377\177\000\000\060\065\020\350\377\177\000\000\000a\370<\316m]\037",
ialign = 65536, lalign = 4295032832, falign = 9.18354962e-41, dalign =
2.1220281700514382e-314, palign = 0x100010000 <Address 0x100010000 out of
bounds>}
        ber = <optimized out>
        rc = 32768
        bytes = <optimized out>
        __PRETTY_FUNCTION__ = "send_ldap_response"
#4  0x00005555555a7126 in slap_send_ldap_result (op=0x7fffe8000930,
rs=0x7ffff1106930) at result.c:860
        tmp = 0x0
        otext = 0x0
        oref = 0x0
        __PRETTY_FUNCTION__ = "slap_send_ldap_result"
#5  0x0000555555621a50 in hdb_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at
modrdn.c:789
        bdb = 0x5555559fa4f0
        children = 0x55555599d260
        entry = 0x55555599cfc0
        p_dn = {bv_len = 29, bv_val = 0x7fffe8102399
"ou=People,dc=my-domain,dc=com"}
        p_ndn = {bv_len = 29, bv_val = 0x7fffe81023c9 ""}
        new_dn = {bv_len = 38, bv_val = 0x0}
        new_ndn = {bv_len = 38, bv_val = 0x0}
        e = <optimized out>
        p = <optimized out>
        ei = 0x7fffe8103f00
        eip = 0x7fffe410a0a0
        nei = 0x7fffe410a0a0
        neip = 0x0
        textbuf = "0\t\000\350\377\177\000\000\000e\020\361\377\177\000\000
i\237UUU\000\000\230\060\021\362\377\177\000\000\200\241^\366\377\177\000\000\000\000\000\000\316m]\037&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000\060\t\000\350\377\177\000\000\070\027\000\350\377\177\000\000\000\000\000\000\000\000\000\000)\323\020\362\377\177\000\000&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000&\000\000\000\000\000\000\000\270\022\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000\000\314X\021\362\377\177\000\000\060i\020\361\377\177\000\000\030\027\000\350\377\177\000\000\030\027\000\350\377\177\000\000\060i\020\361\377\177\000\000\332\326\020\362\377\177\000\000\360d\020\361\377\177\000\000\020e\020\361\377\177\000\000\b\000\000\000\000\000\000\000\270\023\000\350\377\177\000\000\b\000\000\000\000\000\000\000\350\023\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000"
        ltid = 0x0
        lt2 = 0x7fffe81068f0
        opinfo = {boi_oe = {oe_next = {sle_next = 0x0}, oe_key = 0x0}, boi_txn =
0x7fffe8106730, boi_locks = 0x0, boi_err = 0, boi_acl_cache = 0 '\000', boi_flag
= 0 '\000'}
        dummy = {e_id = 4, e_name = {bv_len = 38, bv_val = 0x7fffe8106890
"cn=test2,ou=People,dc=my-domain,dc=com"}, e_nname = {bv_len = 38, bv_val =
0x7fffe81068c0 "cn=test2,ou=people,dc=my-domain,dc=com"}, e_attrs = 0x0,
e_ocflags = 256, e_bv = {bv_len = 0, bv_val = 0x0}, e_private = 0x7fffe8103f00}
        np = <optimized out>
        np_dn = <optimized out>
        np_ndn = <optimized out>
        new_parent_dn = <optimized out>
        manageDSAit = 0
        lock = {off = 164424, ndx = 98, gen = 2, mode = DB_LOCK_WRITE}
        plock = {off = 157848, ndx = 932, gen = 2, mode = DB_LOCK_READ}
        nplock = {off = 0, ndx = 1436511616, gen = 21845, mode = 4044383224}
        num_retries = 0
        preread_ctrl = 0x0
        postread_ctrl = 0x0
        ctrls = {0x0, 0x555555a2ea00, 0x0, 0x7ffff11064a0, 0x7ffff1106480,
0x7ffff1106450}
        num_ctrls = 0
        rc = <optimized out>
        parent_is_glue = 0
        parent_is_leaf = 1
        __PRETTY_FUNCTION__ = "hdb_modrdn"
#6  0x0000555555603c96 in overlay_op_walk (op=op@entry=0x7fffe8000930,
rs=0x7ffff1106930, which=op_modrdn, oi=0x5555559f76b0, on=0x0) at
backover.c:671
        func = <optimized out>
        rc = 32768
#7  0x0000555555603deb in over_op_func (op=0x7fffe8000930, rs=<optimized out>,
which=<optimized out>) at backover.c:723
        oi = <optimized out>
        on = <optimized out>
        be = 0x5555559fa350
        db = {bd_info = 0x5555558e3620, bd_self = 0x5555559fa350, be_ctrls =
"\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001", '\000' <repeats
17 times>, "\001", be_flags = 2312, be_restrictops = 0, be_requires = 0,
be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0,
sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0,
sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x555555a1df40,
be_nsuffix = 0x555555a1df70, be_schemadn = {bv_len = 0, bv_val = 0x0},
be_schemandn = {bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 30, bv_val =
0x555555a1e010 "cn=Manager,dc=my-domain,dc=com"}, be_rootndn = {bv_len = 30,
bv_val = 0x555555a1e060 "cn=manager,dc=my-domain,dc=com"}, be_rootpw = {bv_len =
6, bv_val = 0x555555a1dee0 "secret"}, be_max_deref_depth = 15, be_def_limit =
{lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0,
lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0},
be_limits = 0x0, be_acl = 0x0, be_dfltaccess = ACL_READ, be_extra_anlist = 0x0,
be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0,
be_pending_csn_list = 0x555555bdbd80, be_pcl_mutex = {__data = {__lock = 0,
__count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list =
{__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0},
be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0x5555558e7ec0, be_private =
0x5555559fa4f0, be_next = {stqe_next = 0x0}}
        cb = {sc_next = 0x0, sc_response = 0x555555602ff0 <over_back_response>,
sc_cleanup = 0, sc_private = 0x5555559f76b0}
        sc = <optimized out>
        rc = 32768
        __PRETTY_FUNCTION__ = "over_op_func"
#8  0x00005555555b0f9c in fe_op_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at
modrdn.c:314
        repl_user = <optimized out>
        dest_ndn = {bv_len = 38, bv_val = 0x7fffe80016e8
"cn=test2,ou=people,dc=my-domain,dc=com"}
        dest_pndn = {bv_len = 29, bv_val = 0x7fffe80016c0
"ou=people,dc=my-domain,dc=com"}
        pdn = {bv_len = 0, bv_val = 0x0}
        op_be = 0x5555559fa350
        bd = 0x5555558ea2c0
        diff = <optimized out>
#9  0x00005555555b207e in do_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at
modrdn.c:186
        dn = {bv_len = 38, bv_val = 0x7fffe81065c7
"cn=test1,ou=People,dc=my-domain,dc=com"}
        newrdn = {bv_len = 8, bv_val = 0x7fffe81065ef "cn=test2"}
        newSuperior = {bv_len = 29, bv_val = 0x7fffe81065fc
"ou=People,dc=my-domain,dc=com"}
        deloldrdn = -1
        pnewSuperior = {bv_len = 29, bv_val = 0x7fffe8001658
"ou=People,dc=my-domain,dc=com"}
        nnewSuperior = {bv_len = 29, bv_val = 0x7fffe80016c0
"ou=people,dc=my-domain,dc=com"}
        length = 29
#10 0x0000555555595d21 in connection_operation (ctx=ctx@entry=0x7ffff1106b60,
arg_v=arg_v@entry=0x7fffe8000930) at connection.c:1150
        rc = 80
        cancel = <optimized out>
        op = 0x7fffe8000930
        rs = {sr_type = REP_RESULT, sr_tag = 109, sr_msgid = 2, sr_err = 0,
sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un =
{sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0,
r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0},
sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, sr_flags = 0}
        tag = 108
        opidx = SLAP_OP_MODRDN
        conn = 0x555555a2ea00
        memctx = 0x7fffe8000ed0
        memctx_null = 0x0
        memsiz = 1048576
        __PRETTY_FUNCTION__ = "connection_operation"
#11 0x0000555555596079 in connection_read_thread (ctx=0x7ffff1106b60,
argv=<optimized out>) at connection.c:1286
        rc = <optimized out>
        cri = {op = 0x7fffe8000930, func = 0, arg = 0x0, ctx = <optimized out>,
nullop = <optimized out>}
        s = <optimized out>
#12 0x00007ffff7b997f3 in ldap_int_thread_pool_wrapper (xpool=0x5555559a1b60) at
tpool.c:688
        pool = 0x5555559a1b60
        task = 0x7fffec0008c0
        work_list = <optimized out>
        ctx = {ltu_id = 140737237776128, ltu_key = {{ltk_key = 0x555555593ee0,
ltk_data = 0x7fffe8000dc0, ltk_free = 0x555555593fb0 <conn_counter_destroy>},
{ltk_key = 0x5555555edcc0, ltk_data = 0x7fffe8000ed0, ltk_free = 0x5555555edce0
<slap_sl_mem_destroy>}, {ltk_key = 0x555555bdae00, ltk_data = 0x7fffe81010f0,
ltk_free = 0x555555648bb0 <bdb_reader_free>}, {ltk_key = 0x5555555aa480,
ltk_data = 0x0, ltk_free = 0x5555555aa3e0 <slap_op_q_destroy>}, {ltk_key = 0x0,
ltk_data = 0x0, ltk_free = 0} <repeats 28 times>}}
        kctx = <optimized out>
        keyslot = <optimized out>
        hash = <optimized out>
        __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper"
#13 0x00007ffff6e61d14 in start_thread (arg=0x7ffff1107700) at
pthread_create.c:309
        __res = <optimized out>
        pd = 0x7ffff1107700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737237776128,
5431369951291209288, 1, 140737354125312, 140737237776128, 23,
-5431349871756872120, -5431349957038737848}, mask_was_saved = 0}}, priv = {pad =
{0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#14 0x00007ffff632a67d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.
#0  0x00000000005a39de in rwm_op_rollback (op=0x7fffe4002960, rs=0x7ffff23e5a50,
ros=0x7fffe4003558) at ../../../../servers/slapd/overlays/rwm.c:111
        __PRETTY_FUNCTION__ = "rwm_op_rollback"
#1  0x00000000005a3c79 in rwm_op_cleanup (op=0x7fffe4002960, rs=0x7ffff23e5a50)
at ../../../../servers/slapd/overlays/rwm.c:167
        cb = 0x7fffe4003538
        ros = 0x7fffe4003558
#2  0x00000000004670e8 in slap_cleanup_play (op=0x7fffe4002960,
rs=0x7ffff23e5a50) at ../../../servers/slapd/result.c:541
        sc_next = 0x7ffff23e5690
        sc_nextp = 0x7fffe4003538
        sc = 0x7fffe4003538
        scp = 0x7ffff23e5080
#3  0x0000000000467b16 in send_ldap_response (op=0x7fffe4002960,
rs=0x7ffff23e5a50) at ../../../servers/slapd/result.c:733
        berbuf = {buffer =
"\000\000\001\000\001\000\000\000\377\377\377\377\377\377\377\377", '\000'
<repeats 24 times>, "f6\000\344\377\177\000\000\064F\000\344\377\177\000\000\000\000\000\000\000\000\000\000f6\000\344\377\177\000\000\200'\000\344\377\177\000\000\017\326vP\000\000\000\000\000\017ƾ\032\372\235\264\000\000\000\000\000\000\000\000ĥ`",
'\000' <repeats 13 times>, "\030+\000\344\377\177\000\000\003", '\000' <repeats
15 times>"\356, &\\\000\000\000\000\000иV\000\000\000\000\000
\314\020\344\377\177\000\000\000\017ƾ\032\372\235\264@R>\362\377\177\000\000H\314\020\344\377\177\000\000\a\000\000\000\000\000\000\000\361\264d\000\000\000\000\000\004\000\000\000\000\000\000\000P0\000\344\377\177",
'\000' <repeats 18 times>, "PR>\362\377\177\000\000Pp\275\000\000\000\000",
ialign = 65536, lalign = 4295032832, falign = 9.18354962e-41, dalign =
2.1220281700514382e-314, palign = 0x100010000 <Address 0x100010000 out of
bounds>}
        ber = 0x7ffff23e50f0
        rc = 32768
        bytes = 14
        __PRETTY_FUNCTION__ = "send_ldap_response"
#4  0x0000000000468318 in slap_send_ldap_result (op=0x7fffe4002960,
rs=0x7ffff23e5a50) at ../../../servers/slapd/result.c:860
        tmp = 0x0
        otext = 0x0
        oref = 0x0
        __PRETTY_FUNCTION__ = "slap_send_ldap_result"
#5  0x000000000051e4a9 in hdb_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at
modrdn.c:789
        bdb = 0x9ebd80
        children = 0x9928d0
        entry = 0x992630
        p_dn = {bv_len = 29, bv_val = 0x7fffe410b7f9
"ou=People,dc=my-domain,dc=com"}
        p_ndn = {bv_len = 29, bv_val = 0x7fffe410b829 ""}
        new_dn = {bv_len = 38, bv_val = 0x0}
        new_ndn = {bv_len = 38, bv_val = 0x0}
        e = 0xbf3c78
        p = 0x0
        ei = 0x7fffe410cc20
        eip = 0x7fffe410b970
        nei = 0x7fffe410b970
        neip = 0x0
        textbuf = "X5\000\344\377\177\000\000%\231e\000\000\000\000\000PZ>\362\377\177\000\000`)\000\344\377\177\000\000\220U>\362\377\177\000\000\000\000\000\000\000\000\000\000\320{\236\000\000\000\000\000\260}\236\000\000\000\000\000&\000\000\000\000\000\000\000P0\000\344\377\177\000\000&\000\000\000\000\000\000\000\330\060\000\344\377\177\000\000\260}\236\000\000\000\000\000\200(\242\000\000\000\000\000%\231e\000\000\000\000\000PZ>\362\377\177\000\000\320U>\362\377\177\000\000BXZ\000\000\000\000\000PZ>\362\377\177\000\000`)\000\344\377\177\000\000PZ>\362\000\200\000\000\320{\236\000\000\000\000\000\260}\236\000\000\000\000\000\070\065\000\344\377\177\000\000\035\000\000\000\000\000\000\000\340\064\000\344\377\177\000\000\035\000\000\000\000\000\000\000x4\000\344\377\177\000\000\b\000\000\000\000\000\000\000\330\061\000\344\377\177\000\000\b\000\000\000\000\000\000\000\b"...
        textlen = 256
        ltid = 0x0
        lt2 = 0x7fffe410d8d0
        opinfo = {boi_oe = {oe_next = {sle_next = 0x0}, oe_key = 0x0}, boi_txn =
0x7fffe40024f0, boi_locks = 0x0, boi_err = 0, boi_acl_cache = 0 '\000', boi_flag
= 0 '\000'}
        dummy = {e_id = 4, e_name = {bv_len = 38, bv_val = 0x7fffe4002650
"cn=test2,ou=People,dc=my-domain,dc=com"}, e_nname = {bv_len = 38, bv_val =
0x7fffe4002680 "cn=test2,ou=people,dc=my-domain,dc=com"}, e_attrs = 0x0,
e_ocflags = 256, e_bv = {bv_len = 0, bv_val = 0x0}, e_private = 0x7fffe410cc20}
        np = 0x0
        np_dn = 0x0
        np_ndn = 0x7ffff23e5360
        new_parent_dn = 0x7ffff23e5350
        manageDSAit = 0
        lock = {off = 164424, ndx = 98, gen = 2, mode = DB_LOCK_WRITE}
        plock = {off = 157848, ndx = 932, gen = 2, mode = DB_LOCK_READ}
        nplock = {off = 0, ndx = 0, gen = 0, mode = DB_LOCK_NG}
        num_retries = 0
        preread_ctrl = 0x0
        postread_ctrl = 0x0
        ctrls = {0x0, 0x7fffe4003050, 0xa22880, 0x0, 0x7ffff23e54a0, 0x5abe87}
        num_ctrls = 0
        rc = 0
        parent_is_glue = 0
        parent_is_leaf = 1
        settle = 0
        __PRETTY_FUNCTION__ = "hdb_modrdn"
#6  0x00000000004ebf0c in overlay_op_walk (op=0x7fffe4002960, rs=0x7ffff23e5a50,
which=op_modrdn, oi=0x9e0c10, on=0x0) at ../../../servers/slapd/backover.c:671
        func = 0x8bd198
        rc = 32768
#7  0x00000000004ec141 in over_op_func (op=0x7fffe4002960, rs=0x7ffff23e5a50,
which=op_modrdn) at ../../../servers/slapd/backover.c:723
        oi = 0x9e0c10
        on = 0x9e7bd0
        be = 0x9ebbe0
        db = {bd_info = 0x8bd140, bd_self = 0x9ebbe0, be_ctrls =
"\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001\001", '\000'
<repeats 16 times>, "\001", be_flags = 264, be_restrictops = 0, be_requires = 0,
be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0,
sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0,
sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x9d2740, be_nsuffix =
0x9ebbb0, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0,
bv_val = 0x0}, be_rootdn = {bv_len = 30, bv_val = 0x9ec140
"cn=Manager,dc=my-domain,dc=com"}, be_rootndn = {bv_len = 30, bv_val = 0x9ec190
"cn=manager,dc=my-domain,dc=com"}, be_rootpw = {bv_len = 6, bv_val = 0x9ec440
"secret"}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600,
lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr
= 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x0, be_acl = 0x0,
be_dfltaccess = ACL_READ, be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0,
bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0xbd7030,
be_pcl_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0,
__kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000'
<repeats 39 times>, __align = 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs =
0x8c3400, be_private = 0x9ebd80, be_next = {stqe_next = 0x0}}
        cb = {sc_next = 0x0, sc_response = 0x4eacb0 <over_back_response>,
sc_cleanup = 0, sc_private = 0x9e0c10}
        sc = 0x0
        rc = 32768
        __PRETTY_FUNCTION__ = "over_op_func"
#8  0x00000000004ec2d8 in over_op_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50)
at ../../../servers/slapd/backover.c:768
No locals.
#9  0x00000000004765fa in fe_op_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at
../../../servers/slapd/modrdn.c:314
        repl_user = 0
        dest_ndn = {bv_len = 38, bv_val = 0x7fffe4003508
"cn=test2,ou=people,dc=my-domain,dc=com"}
        dest_pndn = {bv_len = 29, bv_val = 0x7fffe40034e0
"ou=people,dc=my-domain,dc=com"}
        pdn = {bv_len = 0, bv_val = 0x0}
        op_be = 0x9ebbe0
        bd = 0x8c7620
        diff = 0
#10 0x0000000000475d88 in do_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at
../../../servers/slapd/modrdn.c:186
        dn = {bv_len = 38, bv_val = 0x7fffe410cb37
"cn=test1,ou=People,dc=my-domain,dc=com"}
        newrdn = {bv_len = 8, bv_val = 0x7fffe410cb5f "cn=test2"}
        newSuperior = {bv_len = 29, bv_val = 0x7fffe410cb6c
"ou=People,dc=my-domain,dc=com"}
        deloldrdn = -1
        pnewSuperior = {bv_len = 29, bv_val = 0x7fffe4003478
"ou=People,dc=my-domain,dc=com"}
        nnewSuperior = {bv_len = 29, bv_val = 0x7fffe40034e0
"ou=people,dc=my-domain,dc=com"}
        length = 29
#11 0x000000000044fc27 in connection_operation (ctx=0x7ffff23e5b90,
arg_v=0x7fffe4002960) at ../../../servers/slapd/connection.c:1150
        rc = 80
        cancel = 0
        op = 0x7fffe4002960
        rs = {sr_type = REP_RESULT, sr_tag = 109, sr_msgid = 2, sr_err = 0,
sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un =
{sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0,
r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0},
sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, sr_flags = 0}
        tag = 108
        opidx = SLAP_OP_MODRDN
        conn = 0xa22880
        memctx = 0x7fffe4002780
        memctx_null = 0x0
        memsiz = 1048576
        __PRETTY_FUNCTION__ = "connection_operation"
#12 0x0000000000450254 in connection_read_thread (ctx=0x7ffff23e5b90, argv=0x17)
at ../../../servers/slapd/connection.c:1286
        rc = 0
        cri = {op = 0x7fffe4002960, func = 0, arg = 0x0, ctx = 0x7ffff23e5b90,
nullop = 0}
        s = 23
#13 0x00000000005c78ad in ldap_int_thread_pool_wrapper (xpool=0x9973b0) at
../../../libraries/libldap_r/tpool.c:688
        pool = 0x9973b0
        task = 0x7fffec000a20
        work_list = 0x997448
        ctx = {ltu_id = 140737257563904, ltu_key = {{ltk_key = 0x44f70c,
ltk_data = 0x7fffe40028f0, ltk_free = 0x44f5df <conn_counter_destroy>}, {ltk_key
= 0x4caa67, ltk_data = 0x7fffe4002780, ltk_free = 0x4ca88c
<slap_sl_mem_destroy>}, {ltk_key = 0x46c531, ltk_data = 0x0, ltk_free = 0x46c484
<slap_op_q_destroy>}, {ltk_key = 0xbd9430, ltk_data = 0x7fffe4106590, ltk_free =
0x56eac3 <bdb_reader_free>}, {ltk_key = 0x0, ltk_data = 0x7fffe4000ac0, ltk_free
= 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 22 times>, {ltk_key
= 0x0, ltk_data = 0x7ffff6c46ba5, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0,
ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}, {ltk_key = 0x0,
ltk_data = 0x0, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}}}
        kctx = 0x0
        i = 32
        keyslot = 949
        hash = 3994472373
        __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper"
#14 0x00007ffff6c45d14 in start_thread (arg=0x7ffff23e6700) at
pthread_create.c:309
        __res = <optimized out>
        pd = 0x7ffff23e6700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737257563904,
-4915901394837331576, 1, 140737354125312, 140737257563904, 0,
4915909644372648328, 4915916705226662280}, mask_was_saved = 0}}, priv = {pad =
{0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#15 0x00007ffff611867d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.