openldap-bugs

openldap-bugs@openldap.org

1 participants
20966 discussions

Re: (ITS#5687) corrupted double-linked list on shutdown
by hyc＠symas.com 05 Sep '08

05 Sep '08

ando(a)sys-net.it wrote: > h.b.furuseth(a)usit.uio.no wrote: >>> [quanah@freelancer tests]$ *** glibc detected *** >>> /home/quanah/q/openldap-2.4.12/servers/slapd/.libs/lt-slapd: corrupted >>> double-linked list: 0x000000000d28a430 *** >> This message comes from glibc malloc. Its data structures are >> corrupted. >> >> I couldn't figure out much from the the valgrind output. >> But you'll get more frequent mallocs with CPPFLAGS=-DSLAP_NO_SL_MALLOC, >> if that code isn't rotted - maybe that'll bring out the problem in >> another guise. If that code still works, I don't remember. > > Here's my output after compiling with -DSLAP_NO_SL_MALLOC=1, running > test039 under valgrind and suddenly killing the process: > > ==9657== Memcheck, a memory error detector. > ==9657== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al. > ==9657== Using LibVEX rev 1658, a library for dynamic binary translation. > ==9657== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP. > ==9657== Using valgrind-3.2.1, a dynamic binary instrumentation framework. > ==9657== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al. > ==9657== For more details, rerun with: -v > ==9657== > @(#) $OpenLDAP: slapd 2.X (Sep 6 2008 01:35:19) $ > masarati@odino.intra.sys-net.it:/home/masarati/Lavoro/sysnet/Ldap/ldap-devel/servers/slapd > slapd starting > daemon: shutdown requested and initiated. > slapd shutdown: waiting for 8 threads to terminate > ==9657== Thread 3: > ==9657== Invalid read of size 4 > ==9657== at 0x807EF03: slap_listener (daemon.c:1754) > ==9657== by 0x807F9AC: slap_listener_thread (daemon.c:1997) > ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) > ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) > ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) > ==9657== Address 0x415D3A8 is 32 bytes inside a block of size 164 free'd > ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) > ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) > ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) > ==9657== by 0x807EDF8: close_listeners (daemon.c:1703) > ==9657== by 0x808137F: slapd_daemon_task (daemon.c:2578) > ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) > ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) > ==9657== > ==9657== Invalid write of size 4 > ==9657== at 0x807EF22: slap_listener (daemon.c:1759) > ==9657== by 0x807F9AC: slap_listener_thread (daemon.c:1997) > ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) > ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) > ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) > ==9657== Address 0x415D3A4 is 28 bytes inside a block of size 164 free'd > ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) > ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) > ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) > ==9657== by 0x807EDF8: close_listeners (daemon.c:1703) > ==9657== by 0x808137F: slapd_daemon_task (daemon.c:2578) > ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) > ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) > ==9657== > ==9657== Invalid read of size 4 > ==9657== at 0x807EFCD: slap_listener (daemon.c:1781) > ==9657== by 0x807F9AC: slap_listener_thread (daemon.c:1997) > ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) > ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) > ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) > ==9657== Address 0x415D3A8 is 32 bytes inside a block of size 164 free'd > ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) > ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) > ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) > ==9657== by 0x807EDF8: close_listeners (daemon.c:1703) > ==9657== by 0x808137F: slapd_daemon_task (daemon.c:2578) > ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) > ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) > daemon: accept(7) failed errno=9 (Bad file descriptor) > ==9657== > ==9657== Thread 5: > ==9657== Invalid free() / delete / delete[] > ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) > ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) > ==9657== by 0x80E522B: slap_sl_free (sl_malloc.c:451) > ==9657== by 0x80874AF: do_search (search.c:221) > ==9657== by 0x8084347: connection_operation (connection.c:1084) > ==9657== by 0x8084834: connection_read_thread (connection.c:1211) > ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) > ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) > ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) > ==9657== Address 0x5595D60 is 0 bytes inside a block of size 29 free'd > ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) > ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) > ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) > ==9657== by 0x81E1D64: rwm_op_cleanup (rwm.c:64) > ==9657== by 0x80976CD: slap_cleanup_play (result.c:341) > ==9657== by 0x8097DEA: send_ldap_response (result.c:522) > ==9657== by 0x809850E: slap_send_ldap_result (result.c:642) > ==9657== by 0x81855CE: ldap_back_op_result (bind.c:1823) > ==9657== by 0x8184C3D: ldap_back_dobind_int (bind.c:1486) > ==9657== by 0x8184D41: ldap_back_dobind (bind.c:1520) > ==9657== by 0x812C9F7: ldap_back_search (search.c:174) > ==9657== by 0x80F7DF4: glue_sub_search (backglue.c:340) > ==9657== by 0x80F8458: glue_op_search (backglue.c:467) > ==9657== by 0x80FACE3: overlay_op_walk (backover.c:657) > ==9657== by 0x80FAF18: over_op_func (backover.c:719) > ==9657== by 0x80FAF9C: over_op_search (backover.c:741) > ==9657== by 0x8087ADB: fe_op_search (search.c:366) > ==9657== by 0x80FAD63: overlay_op_walk (backover.c:667) > ==9657== by 0x80FAF18: over_op_func (backover.c:719) > ==9657== by 0x80FAF9C: over_op_search (backover.c:741) > ==9657== > ==9657== Invalid free() / delete / delete[] > ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) > ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) > ==9657== by 0x80E522B: slap_sl_free (sl_malloc.c:451) > ==9657== by 0x80874D3: do_search (search.c:224) > ==9657== by 0x8084347: connection_operation (connection.c:1084) > ==9657== by 0x8084834: connection_read_thread (connection.c:1211) > ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) > ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) > ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) > ==9657== Address 0x5595E60 is 0 bytes inside a block of size 29 free'd > ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) > ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) > ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) > ==9657== by 0x81E1D90: rwm_op_cleanup (rwm.c:69) > ==9657== by 0x80976CD: slap_cleanup_play (result.c:341) > ==9657== by 0x8097DEA: send_ldap_response (result.c:522) > ==9657== by 0x809850E: slap_send_ldap_result (result.c:642) > ==9657== by 0x81855CE: ldap_back_op_result (bind.c:1823) > ==9657== by 0x8184C3D: ldap_back_dobind_int (bind.c:1486) > ==9657== by 0x8184D41: ldap_back_dobind (bind.c:1520) > ==9657== by 0x812C9F7: ldap_back_search (search.c:174) > ==9657== by 0x80F7DF4: glue_sub_search (backglue.c:340) > ==9657== by 0x80F8458: glue_op_search (backglue.c:467) > ==9657== by 0x80FACE3: overlay_op_walk (backover.c:657) > ==9657== by 0x80FAF18: over_op_func (backover.c:719) > ==9657== by 0x80FAF9C: over_op_search (backover.c:741) > ==9657== by 0x8087ADB: fe_op_search (search.c:366) > ==9657== by 0x80FAD63: overlay_op_walk (backover.c:667) > ==9657== by 0x80FAF18: over_op_func (backover.c:719) > ==9657== by 0x80FAF9C: over_op_search (backover.c:741) > conn=3 op=1 ldap_back_retry: retrying URI="ldap://localhost:9011" > DN="cn=manager,dc=example,dc=com" > ==9657== Warning: invalid file descriptor -1 in syscall close() > ==9657== Warning: invalid file descriptor -1 in syscall close() > ==9657== Warning: invalid file descriptor -1 in syscall close() > ==9657== Warning: invalid file descriptor -1 in syscall close() > ==9657== Warning: invalid file descriptor -1 in syscall close() > ==9657== Warning: invalid file descriptor -1 in syscall close() > ==9657== Warning: invalid file descriptor -1 in syscall close() > ==9657== Warning: invalid file descriptor -1 in syscall close() > slapd stopped. > ==9657== > ==9657== ERROR SUMMARY: 7 errors from 5 contexts (suppressed: 36 from 1) > ==9657== malloc/free: in use at exit: 1,127 bytes in 15 blocks. > ==9657== malloc/free: 34,414 allocs, 34,403 frees, 12,376,432 bytes > allocated. > ==9657== For counts of detected errors, rerun with: -v > ==9657== searching for pointers to 15 not-freed blocks. > ==9657== checked 774,072 bytes. > > Apparently, the listener is freed while some thread is still using it. Since that can only occur during shutdown, I don't think it's really a high priority problem. More to the point, it will not cause any heap corruption. The serious problem is in thread 5, where rwm_op_cleanup frees a DN that do_search also tries to free. It looks like rwm_op_cleanup is badly broken here, it apparently should be checking to make sure ros->ro_dn is != ros->r_dn before freeing r_dn (and ndn). -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Searching for (objectClass=UNDEFINED)...
by Pierangelo Masarati 05 Sep '08

05 Sep '08

... returns success with the text "value does not conform to assertion syntax"; is this the intended behavior, or should the filter error go completely unnoticed, and the text rather be logged, or what? The current behavior seems to be a consequence of servers/slapd/ava.c 1.45 -> 1.46 (by hyc) returning LDAP_SUCCESS instead of rc, without intentionally?) clearing text. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

5 8

Re: (ITS#5687) corrupted double-linked list on shutdown
by ando＠sys-net.it 05 Sep '08

05 Sep '08

h.b.furuseth(a)usit.uio.no wrote: >> [quanah@freelancer tests]$ *** glibc detected *** >> /home/quanah/q/openldap-2.4.12/servers/slapd/.libs/lt-slapd: corrupted >> double-linked list: 0x000000000d28a430 *** > > This message comes from glibc malloc. Its data structures are > corrupted. > > I couldn't figure out much from the the valgrind output. > But you'll get more frequent mallocs with CPPFLAGS=-DSLAP_NO_SL_MALLOC, > if that code isn't rotted - maybe that'll bring out the problem in > another guise. If that code still works, I don't remember. Here's my output after compiling with -DSLAP_NO_SL_MALLOC=1, running test039 under valgrind and suddenly killing the process: ==9657== Memcheck, a memory error detector. ==9657== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al. ==9657== Using LibVEX rev 1658, a library for dynamic binary translation. ==9657== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP. ==9657== Using valgrind-3.2.1, a dynamic binary instrumentation framework. ==9657== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al. ==9657== For more details, rerun with: -v ==9657== @(#) $OpenLDAP: slapd 2.X (Sep 6 2008 01:35:19) $ masarati@odino.intra.sys-net.it:/home/masarati/Lavoro/sysnet/Ldap/ldap-devel/servers/slapd slapd starting daemon: shutdown requested and initiated. slapd shutdown: waiting for 8 threads to terminate ==9657== Thread 3: ==9657== Invalid read of size 4 ==9657== at 0x807EF03: slap_listener (daemon.c:1754) ==9657== by 0x807F9AC: slap_listener_thread (daemon.c:1997) ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) ==9657== Address 0x415D3A8 is 32 bytes inside a block of size 164 free'd ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) ==9657== by 0x807EDF8: close_listeners (daemon.c:1703) ==9657== by 0x808137F: slapd_daemon_task (daemon.c:2578) ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) ==9657== ==9657== Invalid write of size 4 ==9657== at 0x807EF22: slap_listener (daemon.c:1759) ==9657== by 0x807F9AC: slap_listener_thread (daemon.c:1997) ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) ==9657== Address 0x415D3A4 is 28 bytes inside a block of size 164 free'd ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) ==9657== by 0x807EDF8: close_listeners (daemon.c:1703) ==9657== by 0x808137F: slapd_daemon_task (daemon.c:2578) ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) ==9657== ==9657== Invalid read of size 4 ==9657== at 0x807EFCD: slap_listener (daemon.c:1781) ==9657== by 0x807F9AC: slap_listener_thread (daemon.c:1997) ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) ==9657== Address 0x415D3A8 is 32 bytes inside a block of size 164 free'd ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) ==9657== by 0x807EDF8: close_listeners (daemon.c:1703) ==9657== by 0x808137F: slapd_daemon_task (daemon.c:2578) ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) daemon: accept(7) failed errno=9 (Bad file descriptor) ==9657== ==9657== Thread 5: ==9657== Invalid free() / delete / delete[] ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) ==9657== by 0x80E522B: slap_sl_free (sl_malloc.c:451) ==9657== by 0x80874AF: do_search (search.c:221) ==9657== by 0x8084347: connection_operation (connection.c:1084) ==9657== by 0x8084834: connection_read_thread (connection.c:1211) ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) ==9657== Address 0x5595D60 is 0 bytes inside a block of size 29 free'd ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) ==9657== by 0x81E1D64: rwm_op_cleanup (rwm.c:64) ==9657== by 0x80976CD: slap_cleanup_play (result.c:341) ==9657== by 0x8097DEA: send_ldap_response (result.c:522) ==9657== by 0x809850E: slap_send_ldap_result (result.c:642) ==9657== by 0x81855CE: ldap_back_op_result (bind.c:1823) ==9657== by 0x8184C3D: ldap_back_dobind_int (bind.c:1486) ==9657== by 0x8184D41: ldap_back_dobind (bind.c:1520) ==9657== by 0x812C9F7: ldap_back_search (search.c:174) ==9657== by 0x80F7DF4: glue_sub_search (backglue.c:340) ==9657== by 0x80F8458: glue_op_search (backglue.c:467) ==9657== by 0x80FACE3: overlay_op_walk (backover.c:657) ==9657== by 0x80FAF18: over_op_func (backover.c:719) ==9657== by 0x80FAF9C: over_op_search (backover.c:741) ==9657== by 0x8087ADB: fe_op_search (search.c:366) ==9657== by 0x80FAD63: overlay_op_walk (backover.c:667) ==9657== by 0x80FAF18: over_op_func (backover.c:719) ==9657== by 0x80FAF9C: over_op_search (backover.c:741) ==9657== ==9657== Invalid free() / delete / delete[] ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) ==9657== by 0x80E522B: slap_sl_free (sl_malloc.c:451) ==9657== by 0x80874D3: do_search (search.c:224) ==9657== by 0x8084347: connection_operation (connection.c:1084) ==9657== by 0x8084834: connection_read_thread (connection.c:1211) ==9657== by 0x820F3D4: ldap_int_thread_pool_wrapper (tpool.c:663) ==9657== by 0xDEB46A: start_thread (in /lib/libpthread-2.5.so) ==9657== by 0xD42DBD: clone (in /lib/libc-2.5.so) ==9657== Address 0x5595E60 is 0 bytes inside a block of size 29 free'd ==9657== at 0x4004FDA: free (vg_replace_malloc.c:233) ==9657== by 0x82407C9: ber_memfree_x (memory.c:152) ==9657== by 0x80A59E5: ch_free (ch_malloc.c:139) ==9657== by 0x81E1D90: rwm_op_cleanup (rwm.c:69) ==9657== by 0x80976CD: slap_cleanup_play (result.c:341) ==9657== by 0x8097DEA: send_ldap_response (result.c:522) ==9657== by 0x809850E: slap_send_ldap_result (result.c:642) ==9657== by 0x81855CE: ldap_back_op_result (bind.c:1823) ==9657== by 0x8184C3D: ldap_back_dobind_int (bind.c:1486) ==9657== by 0x8184D41: ldap_back_dobind (bind.c:1520) ==9657== by 0x812C9F7: ldap_back_search (search.c:174) ==9657== by 0x80F7DF4: glue_sub_search (backglue.c:340) ==9657== by 0x80F8458: glue_op_search (backglue.c:467) ==9657== by 0x80FACE3: overlay_op_walk (backover.c:657) ==9657== by 0x80FAF18: over_op_func (backover.c:719) ==9657== by 0x80FAF9C: over_op_search (backover.c:741) ==9657== by 0x8087ADB: fe_op_search (search.c:366) ==9657== by 0x80FAD63: overlay_op_walk (backover.c:667) ==9657== by 0x80FAF18: over_op_func (backover.c:719) ==9657== by 0x80FAF9C: over_op_search (backover.c:741) conn=3 op=1 ldap_back_retry: retrying URI="ldap://localhost:9011" DN="cn=manager,dc=example,dc=com" ==9657== Warning: invalid file descriptor -1 in syscall close() ==9657== Warning: invalid file descriptor -1 in syscall close() ==9657== Warning: invalid file descriptor -1 in syscall close() ==9657== Warning: invalid file descriptor -1 in syscall close() ==9657== Warning: invalid file descriptor -1 in syscall close() ==9657== Warning: invalid file descriptor -1 in syscall close() ==9657== Warning: invalid file descriptor -1 in syscall close() ==9657== Warning: invalid file descriptor -1 in syscall close() slapd stopped. ==9657== ==9657== ERROR SUMMARY: 7 errors from 5 contexts (suppressed: 36 from 1) ==9657== malloc/free: in use at exit: 1,127 bytes in 15 blocks. ==9657== malloc/free: 34,414 allocs, 34,403 frees, 12,376,432 bytes allocated. ==9657== For counts of detected errors, rerun with: -v ==9657== searching for pointers to 15 not-freed blocks. ==9657== checked 774,072 bytes. Apparently, the listener is freed while some thread is still using it. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#5688) slapd returns success with message when an undefined objectClass is used in filter
by ando＠sys-net.it 05 Sep '08

05 Sep '08

Full_Name: Pierangelo Masarati Version: HEAD/re24 OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.72.89.40) Submitted by: ando See discussion here: <http://www.openldap.org/lists/openldap-bugs/200809/msg00029.html>. A fix is coming. p.

1 0

Re: (ITS#5687) corrupted double-linked list on shutdown
by quanah＠zimbra.com 05 Sep '08

05 Sep '08

--On Friday, September 05, 2008 8:52 PM +0000 h.b.furuseth(a)usit.uio.no wrote: >> [quanah@freelancer tests]$ *** glibc detected *** >> /home/quanah/q/openldap-2.4.12/servers/slapd/.libs/lt-slapd: corrupted >> double-linked list: 0x000000000d28a430 *** > > This message comes from glibc malloc. Its data structures are > corrupted. > > I couldn't figure out much from the the valgrind output. > But you'll get more frequent mallocs with CPPFLAGS=-DSLAP_NO_SL_MALLOC, > if that code isn't rotted - maybe that'll bring out the problem in > another guise. If that code still works, I don't remember. More notes: I get a core file every time I kill test039, even at stages outside the search. I only get the glibc error some of the time. Even testing with the latest and greatest valgrind, I don't see anything in its output file. I've managed to reproduce this behavior on both CentOS5 (64-bit) and RHEL4 (64-bit), which are running different kernels (and I assume glibc versions). backtrace on a non-glibc fault core: Core was generated by `/home/quanah/q/openldap-2.4.12/servers/slapd/.libs/lt-slapd -s0 -f /home/quanah'. Program terminated with signal 11, Segmentation fault. #0 0x00000038dc06ca17 in malloc_consolidate () from /lib64/libc.so.6 (gdb) bt #0 0x00000038dc06ca17 in malloc_consolidate () from /lib64/libc.so.6 #1 0x00000038dc06e607 in _int_free () from /lib64/libc.so.6 #2 0x00000038dc071fac in free () from /lib64/libc.so.6 #3 0x00002ae61bf34732 in ber_memfree_x (p=0x7302670, ctx=0x0) at memory.c:152 #4 0x000000000049d882 in slap_sl_mem_destroy (key=0x49da46, data=0x7302630) at sl_malloc.c:41 #5 0x00002ae61bce35c2 in ldap_pvt_thread_pool_context_reset (vctx=0x46da1dd0) at tpool.c:943 #6 0x00002ae61bce2a8a in ldap_int_thread_pool_wrapper (xpool=0x688e610) at tpool.c:677 #7 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #8 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #9 0x0000000000000000 in ?? () -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#5687) corrupted double-linked list on shutdown
by hyc＠symas.com 05 Sep '08

05 Sep '08

1 0

Re: (ITS#5687) corrupted double-linked list on shutdown
by h.b.furuseth＠usit.uio.no 05 Sep '08

05 Sep '08

> [quanah@freelancer tests]$ *** glibc detected *** > /home/quanah/q/openldap-2.4.12/servers/slapd/.libs/lt-slapd: corrupted > double-linked list: 0x000000000d28a430 *** This message comes from glibc malloc. Its data structures are corrupted. I couldn't figure out much from the the valgrind output. But you'll get more frequent mallocs with CPPFLAGS=-DSLAP_NO_SL_MALLOC, if that code isn't rotted - maybe that'll bring out the problem in another guise. If that code still works, I don't remember. -- Hallvard

1 0

Re: (ITS#5687) corrupted double-linked list on shutdown
by quanah＠zimbra.com 05 Sep '08

05 Sep '08

--On Friday, September 05, 2008 7:03 PM +0000 quanah(a)zimbra.com wrote: With valgrind: [quanah@freelancer tests]$ *** glibc detected *** /home/quanah/q/openldap-2.4.12/servers/slapd/.libs/lt-slapd: corrupted double-linked list: 0x000000000d28a430 *** ======= Backtrace: ========= /lib64/libc.so.6[0x38dc06cbb7] /lib64/libc.so.6[0x38dc06ee92] /lib64/libc.so.6(__libc_calloc+0x96)[0x38dc070376] /lib64/ld-linux-x86-64.so.2[0x38dbc09c85] /lib64/ld-linux-x86-64.so.2[0x38dbc05abc] /lib64/ld-linux-x86-64.so.2[0x38dbc07cac] /lib64/ld-linux-x86-64.so.2[0x38dbc1088f] /lib64/ld-linux-x86-64.so.2[0x38dbc0cc36] /lib64/ld-linux-x86-64.so.2[0x38dbc1036c] /lib64/libc.so.6[0x38dc101320] /lib64/ld-linux-x86-64.so.2[0x38dbc0cc36] /lib64/libc.so.6(__libc_dlopen_mode+0x47)[0x38dc101487] /lib64/libpthread.so.0[0x38dcc0e40c] /lib64/libpthread.so.0[0x38dcc0e520] /lib64/libpthread.so.0(__pthread_unwind+0x40)[0x38dcc0c430] /lib64/libpthread.so.0[0x38dcc07335] /home/quanah/q/openldap-2.4.12/libraries/libldap_r/.libs/libldap_r-2.4-releng.so.2(ldap_pvt_thread_join+0x0)[0x2b537fec7e4a] /home/quanah/q/openldap-2.4.12/libraries/libldap_r/.libs/libldap_r-2.4-releng.so.2[0x2b537fec6b9c] /lib64/libpthread.so.0[0x38dcc061b5] /lib64/libc.so.6(clone+0x6d)[0x38dc0cd36d] ======= Memory map: ======== 00400000-00530000 r-xp 00000000 fd:00 32115271 /home/quanah/q/openldap-2.4.12/servers/slapd/.libs/lt-slapd 00730000-00739000 rw-p 00130000 fd:00 32115271 /home/quanah/q/openldap-2.4.12/servers/slapd/.libs/lt-slapd 00739000-0077d000 rw-p 00739000 00:00 0 0ce47000-0de31000 rw-p 0ce47000 00:00 0 40940000-40941000 ---p 40940000 00:00 0 40941000-41141000 rwxp 40941000 00:00 0 41141000-41142000 ---p 41141000 00:00 0 41142000-41942000 rwxp 41142000 00:00 0 41942000-41943000 ---p 41942000 00:00 0 41943000-42143000 rwxp 41943000 00:00 0 42143000-42144000 ---p 42143000 00:00 0 42144000-42944000 rwxp 42144000 00:00 0 42944000-42945000 ---p 42944000 00:00 0 42945000-43145000 rwxp 42945000 00:00 0 43145000-43146000 ---p 43145000 00:00 0 43146000-43946000 rwxp 43146000 00:00 0 43946000-43947000 ---p 43946000 00:00 0 43947000-44147000 rwxp 43947000 00:00 0 44147000-44148000 ---p 44147000 00:00 0 44148000-44948000 rwxp 44148000 00:00 0 44948000-44949000 ---p 44948000 00:00 0 44949000-45149000 rwxp 44949000 00:00 0 45149000-4514a000 ---p 45149000 00:00 0 4514a000-4594a000 rwxp 4514a000 00:00 0 4594a000-4594b000 ---p 4594a000 00:00 0 4594b000-4614b000 rwxp 4594b000 00:00 0 4614b000-4614c000 ---p 4614b000 00:00 0 4614c000-4694c000 rwxp 4614c000 00:00 0 4694c000-4694d000 ---p 4694c000 00:00 0 4694d000-4714d000 rwxp 4694d000 00:00 0 4714d000-4714e000 ---p 4714d000 00:00 0 4714e000-4794e000 rwxp 4714e000 00:00 0 4794e000-4794f000 ---p 4794e000 00:00 0 4794f000-4814f000 rwxp 4794f000 00:00 0 4814f000-48150000 ---p 4814f000 00:00 0 48150000-48950000 rwxp 48150000 00:00 0 48950000-48951000 ---p 48950000 00:00 0 48951000-49151000 rwxp 48951000 00:00 0 38dbc00000-38dbc1a000 r-xp 00000000 fd:00 12026130 /lib64/ld-2.5.so 38dbe19000-38dbe1a000 r--p 00019000 fd:00 12026130 /lib64/ld-2.5.so 38dbe1a000-38dbe1b000 rw-p 0001a000 fd:00 12026130 /lib64/ld-2.5.so 38dc000000-38dc144000 r-xp 00000000 fd:00 12026131 /lib64/libc-2.5.so 38dc144000-38dc344000 ---p 00144000 fd:00 12026131 /lib64/libc-2.5.so 38dc344000-38dc348000 r--p 00144000 fd:00 12026131 /lib64/libc-2.5.so 38dc348000-38dc349000 rw-p 00148000 fd:00 12026131 /lib64/libc-2.5.so 38dc349000-38dc34e000 rw-p 38dc349000 00:00 0 38dc400000-38dc402000 r-xp 00000000 fd:00 12026132 /lib64/libdl-2.5.so 38dc402000-38dc602000 ---p 00002000 fd:00 12026132 /lib64/libdl-2.5.so 38dc602000-38dc603000 r--p 00002000 fd:00 12026132 /lib64/libdl-2.5.so 38dc603000-38dc604000 rw-p 00003000 fd:00 12026132 /lib64/libdl-2.5.so 38dcc00000-38dcc15000 r-xp 00000000 fd:00 12026136 Core was generated by `/home/quanah/q/openldap-2.4.12/servers/slapd/.libs/lt-slapd -s0 -f /home/quanah'. Program terminated with signal 6, Aborted. #0 0x00000038dc030015 in raise () from /lib64/libc.so.6 (gdb) bt #0 0x00000038dc030015 in raise () from /lib64/libc.so.6 #1 0x00000038dc031980 in abort () from /lib64/libc.so.6 #2 0x00000038dc0674cb in __libc_message () from /lib64/libc.so.6 #3 0x00000038dc06cbb7 in malloc_consolidate () from /lib64/libc.so.6 #4 0x00000038dc06ee92 in _int_malloc () from /lib64/libc.so.6 #5 0x00000038dc070376 in calloc () from /lib64/libc.so.6 #6 0x00000038dbc09c85 in _dl_new_object () from /lib64/ld-linux-x86-64.so.2 #7 0x00000038dbc05abc in _dl_map_object_from_fd () from /lib64/ld-linux-x86-64.so.2 #8 0x00000038dbc07cac in _dl_map_object () from /lib64/ld-linux-x86-64.so.2 #9 0x00000038dbc1088f in dl_open_worker () from /lib64/ld-linux-x86-64.so.2 #10 0x00000038dbc0cc36 in _dl_catch_error () from /lib64/ld-linux-x86-64.so.2 #11 0x00000038dbc1036c in _dl_open () from /lib64/ld-linux-x86-64.so.2 #12 0x00000038dc101320 in do_dlopen () from /lib64/libc.so.6 #13 0x00000038dbc0cc36 in _dl_catch_error () from /lib64/ld-linux-x86-64.so.2 #14 0x00000038dc101487 in __libc_dlopen_mode () from /lib64/libc.so.6 #15 0x00000038dcc0e40c in pthread_cancel_init () from /lib64/libpthread.so.0 #16 0x00000038dcc0e520 in _Unwind_ForcedUnwind () from /lib64/libpthread.so.0 #17 0x00000038dcc0c430 in __pthread_unwind () from /lib64/libpthread.so.0 #18 0x00000038dcc07335 in pthread_exit () from /lib64/libpthread.so.0 #19 0x00002b537fec7e4a in ldap_pvt_thread_exit (retval=0x0) at thr_posix.c:186 #20 0x00002b537fec6b9c in ldap_int_thread_pool_wrapper (xpool=0xce75610) at tpool.c:691 #21 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #22 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #23 0x0000000000000000 in ?? () -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#5686) OpenLDAP build broken for solaris 64bit
by h.b.furuseth＠usit.uio.no 05 Sep '08

05 Sep '08

quanah(a)zimbra.com writes: > Sounds like a broken release of libtool to me. i.e., I don't see > anything here that's an openldap specific issue. I'd advise examining > your tool chain. Hm? libtool is built from build/ltmain.sh + build/config.* bundled with OpenLDAP. And it's quite old. If that's failing, it needs an upgrade in OpenLDAP. I looked at it once but couldn't test a fresh libtool + autotools on more than one or two hosts. And the current installation uses some patches form the standar dlibtool distribution which I don't know what do. I don't remember what came of it. Anyway, it might be a fix to try libtoolize --copy --force aclocal autoconf with later versions of autotools (autoconf, automake, libtool). -- Hallvard

1 0

Re: (ITS#5686) OpenLDAP build broken for solaris 64bit
by quanah＠zimbra.com 05 Sep '08

05 Sep '08

--On Friday, September 05, 2008 3:37 PM +0000 cwf-ml(a)arcor.de wrote: > Full_Name: Christoph Weber-Fahr > Version: openldap-2.4.11 > OS: Solaris 9 (SunOS ldapsun 5.9 Generic_122300-06 sun4u sparc > SUNW,Sun-Blade-100) URL: > Submission from: (NULL) (145.253.3.244) > > > Machine has gcc (3.4.6) and gnu binutils from sunfreeware installed (plus > a few other things) Sounds like a broken release of libtool to me. i.e., I don't see anything here that's an openldap specific issue. I'd advise examining your tool chain. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs