[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#8012) SIGSEGV while disconnect/abandon

Let see to syncprov_matchops() in syncprov.c:

lines 1233-1235 (begin of the loop):
     ldap_pvt_thread_mutex_lock( &si->si_ops_mutex );
     for (ss = si->si_ops, sprev = (syncops *)&si->si_ops; ss;
         sprev = ss, ss=snext)

lines 1273-1275:
             ss = sprev;

and 1347 (near from end of the loop):
             syncprov_free_syncop( ss );

Seems that syncops which is freed on 1347 could be referenced by 1273 on 
a next iteration of the loop.