moreinfo Re: slapd 2.4.7-2.4.9 segfaults with some specific search

[Piotr Wadas <pwadas@jewish.org.pl>]

Hello,
I used gdb with "backtrace" command, and here's the output.
glibc version is 2.7, and the kernel is 2.6.18 with bigmem.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xaa5c1b90 (LWP 17164)]
0xb7bde42c in free () from /usr/lib/i486-linux-gnu/i686/cmov/libc.so.6
(gdb) backtrace
#0  0xb7bde42c in free () from /usr/lib/i486-linux-gnu/i686/cmov/libc.so.6
#1  0xb7f261ea in ber_memfree_x (p=0x0, ctx=0x0) at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/libraries/liblber/memory.c:152
#2  0xb7f261dc in ber_memfree_x (p=0x0, ctx=0x0) at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/libraries/liblber/memory.c:159
#3  0xb7f26275 in ber_bvarray_free_x (a=0xaa0c0354, ctx=0x8261d40) at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/libraries/liblber/memory.c:731
#4  0xb73988a5 in bdb_filter_candidates (op=0x8273450, locker=7, 
f=0xaa0c025c, ids=0xa9a3f008, tmp=0xa98bf008, stack=0xa9abf008)
    at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/back-bdb/filterindex.c:803
#5  0xb7399024 in list_candidates (op=0x8273450, locker=7, 
flist=0xaa0c01ec, ftype=160, ids=0xa99bf008, tmp=0xa98bf008, 
save=0xa9a3f008)
    at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/back-bdb/filterindex.c:581
#6  0xb7397787 in bdb_filter_candidates (op=0x8273450, locker=7, 
f=0xaa0c02bc, ids=0xa99bf008, tmp=0xa98bf008, stack=0xa9a3f008)
    at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/back-bdb/filterindex.c:198
#7  0xb7399024 in list_candidates (op=0x8273450, locker=7, 
flist=0xaa5c0038, ftype=161, ids=0xa993f008, tmp=0xa98bf008, 
save=0xa99bf008)
    at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/back-bdb/filterindex.c:581
#8  0xb739758a in bdb_filter_candidates (op=0x8273450, locker=7, 
f=0xaa5c002c, ids=0xa993f008, tmp=0xa98bf008, stack=0xa99bf008)
    at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/back-bdb/filterindex.c:204
#9  0xb7399024 in list_candidates (op=0x8273450, locker=7, 
flist=0xaa5c0020, ftype=160, ids=0xaa4fff8c, tmp=0xa98bf008, 
save=0xa993f008)
    at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/back-bdb/filterindex.c:581
#10 0xb7397787 in bdb_filter_candidates (op=0x8273450, locker=7, 
f=0xaa5c0044, ids=0xaa4fff8c, tmp=0xa98bf008, stack=0xa993f008)
    at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/back-bdb/filterindex.c:198
#11 0xb7392808 in bdb_search (op=0x8273450, rs=0xaa5c1168) at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/back-bdb/search.c:1109
#12 0x08077f43 in fe_op_search (op=0x8273450, rs=0xaa5c1168) at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/search.c:366
#13 0x0807876c in do_search (op=0x8273450, rs=0xaa5c1168) at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/search.c:217
#14 0x08075a0f in connection_operation (ctx=0xaa5c1248, arg_v=0x8273450) 
at /home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/connection.c:1084
#15 0x08076106 in connection_read_thread (ctx=0xaa5c1248, argv=0x10) at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/servers/slapd/connection.c:1211
#16 0xb7f37dd4 in ldap_int_thread_pool_wrapper (xpool=0x81af9b8) at 
/home/pwadas/SRC/SLAPD/openldap-2.4.9/libraries/libldap_r/tpool.c:663
#17 0xb7cc24fb in start_thread () from 
/usr/lib/i486-linux-gnu/i686/cmov/libpthread.so.0
#18 0xb7c45e8e in clone () from 
/usr/lib/i486-linux-gnu/i686/cmov/libc.so.6