Re: (ITS#8012) SIGSEGV while disconnect/abandon

[leo@yuriev.ru]

Let see to syncprov_matchops() in syncprov.c:

lines 1233-1235 (begin of the loop):
     ldap_pvt_thread_mutex_lock( &si->si_ops_mutex );
     for (ss = si->si_ops, sprev = (syncops *)&si->si_ops; ss;
         sprev = ss, ss=snext)

lines 1273-1275:
             ss = sprev;
             continue;
         }

and 1347 (near from end of the loop):
             syncprov_free_syncop( ss );

Seems that syncops which is freed on 1347 could be referenced by 1273 on 
a next iteration of the loop.

Leonid.