openldap-bugs

openldap-bugs@openldap.org

1 participants
20959 discussions

Re: (ITS#6497) Infinite loop in translucent.c
by ondrej.kuznik＠acision.com 25 Mar '10

25 Mar '10

--------------000706010609000308080803 Content-Type: text/plain; charset="ISO-8859-15" Content-Transfer-Encoding: 7bit masarati(a)aero.polimi.it wrote: > Fixed in HEAD; please test. Thanks, p. The patch works, however gcc with "-Wall -pedantic" complains that according to C standards, behaviour of line like this is undefined. For maximum portability, it is probably best to increment "i" individually instead, as seen in the attached patch. I apologise for the inconvenience of patching a tiny bug like this in two stages. Ondrej Kuznik This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. --------------000706010609000308080803 Content-Type: text/x-patch; name="fix.diff" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="fix.diff" Content-Description: fix.diff Index: openldap-2.4.20/servers/slapd/overlays/translucent.c =================================================================== --- openldap-2.4.20.orig/servers/slapd/overlays/translucent.c 2010-03-25 14:38:21.000000000 +0100 +++ openldap-2.4.20/servers/slapd/overlays/translucent.c 2010-03-25 14:38:38.000000000 +0100 @@ -205,7 +205,8 @@ i = c->valx; ch_free( (*an)[i].an_name.bv_val ); do { - (*an)[i] = (*an)[++i]; + (*an)[i] = (*an)[i+1]; + i++; } while ( !BER_BVISNULL( &(*an)[i].an_name )); } return 0; --------------000706010609000308080803--

1 0

Re: (ITS#6478) slapd crashes with segfault
by wolfgang.hummel＠hp.com 25 Mar '10

25 Mar '10

We managed to install it with debug-symbols now, but did not have a new crash (yet). However we did a deeper anaylysis of existing crashes. Here is the outcome: GNU gdb Red Hat Linux (6.5-25.el5rh) Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you ar= e welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu"...Using host libthread= _db library "/lib64/libthread_db.so.1". Reading symbols from /usr/lib64/libltdl.so.3...done. Loaded symbols for /usr/lib64/libltdl.so.3 Reading symbols from /lib64/libdl.so.2...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libuuid.so.1...done. Loaded symbols for /lib64/libuuid.so.1 Reading symbols from /usr/lib64/libslapd_db-4.7.so...done. Loaded symbols for /usr/lib64/libslapd_db-4.7.so Reading symbols from /usr/lib64/libodbc.so.1...done. Loaded symbols for /usr/lib64/libodbc.so.1 Reading symbols from /usr/lib64/libsasl2.so.2...done. Loaded symbols for /usr/lib64/libsasl2.so.2 Reading symbols from /lib64/libssl.so.6...done. Loaded symbols for /lib64/libssl.so.6 Reading symbols from /lib64/libcrypto.so.6...done. Loaded symbols for /lib64/libcrypto.so.6 Reading symbols from /lib64/libcrypt.so.1...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/libresolv.so.2...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libpthread.so.0...done. Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /usr/lib64/libwrap.so.0...done. Loaded symbols for /usr/lib64/libwrap.so.0 Reading symbols from /lib64/libc.so.6...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/ld-linux-x86-64.so.2...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib64/libgssapi_krb5.so.2...done. Loaded symbols for /usr/lib64/libgssapi_krb5.so.2 Reading symbols from /usr/lib64/libkrb5.so.3...done. Loaded symbols for /usr/lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /usr/lib64/libk5crypto.so.3...done. Loaded symbols for /usr/lib64/libk5crypto.so.3 Reading symbols from /usr/lib64/libz.so.1...done. Loaded symbols for /usr/lib64/libz.so.1 Reading symbols from /lib64/libnsl.so.1...done. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /usr/lib64/libkrb5support.so.0...done. Loaded symbols for /usr/lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libselinux.so.1...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libsepol.so.1...done. Loaded symbols for /lib64/libsepol.so.1 Reading symbols from /lib64/libnss_dns.so.2...done. Loaded symbols for /lib64/libnss_dns.so.2 Reading symbols from /lib64/libnss_files.so.2...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /usr/lib64/sasl2/libplain.so.2...done. Loaded symbols for /usr/lib64/sasl2/libplain.so.2 Reading symbols from /usr/lib64/sasl2/libanonymous.so.2...done. Loaded symbols for /usr/lib64/sasl2/libanonymous.so.2 Reading symbols from /usr/lib64/sasl2/liblogin.so.2...done. Loaded symbols for /usr/lib64/sasl2/liblogin.so.2 Reading symbols from /usr/lib64/openldap/syncprov-2.4.so.2...Reading symbol= s from /usr/lib/debug/usr/lib64/openldap/syncprov-2.4.so.2.5.4.debug...done= . done. Loaded symbols for /usr/lib64/openldap/syncprov-2.4.so.2 Reading symbols from /usr/lib64/openldap/cms_template-2.4.so.2...Reading sy= mbols from /usr/lib/debug/usr/lib64/openldap/cms_template-2.4.so.2.5.4.debu= g...done. done. Loaded symbols for /usr/lib64/openldap/cms_template-2.4.so.2 Reading symbols from /usr/lib64/openldap/cms_modif-2.4.so.2...Reading symbo= ls from /usr/lib/debug/usr/lib64/openldap/cms_modif-2.4.so.2.5.4.debug...do= ne. done. Loaded symbols for /usr/lib64/openldap/cms_modif-2.4.so.2 Reading symbols from /lib64/libgcc_s.so.1...done. Loaded symbols for /lib64/libgcc_s.so.1 Core was generated by `/usr/sbin/slapd -h ldap:/// -u ldap'. Program terminated with signal 6, Aborted. #0 0x00000037a4e30045 in raise () from /lib64/libc.so.6 (gdb) thread apply all bt Thread 10 (process 12403): #0 0x00000037a5a075a5 in pthread_join () from /lib64/libpthread.so.0 #1 0x000000000043402c in slapd_daemon () at ../../../servers/slapd/daemon.= c:2834 #2 0x0000000000420d75 in main (argc=3D5, argv=3D0x7fff57a47818) at ../../.= ./servers/slapd/main.c:953 Thread 9 (process 12406): #0 0x00000037a5a0a496 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/lib= pthread.so.0 #1 0x00000000005302bd in ldap_int_thread_pool_wrapper (xpool=3D<value opti= mized out>) at ../../../libraries/libldap_r/tpool.c:712 #2 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #3 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 Thread 8 (process 12407): #0 0x00000037a5a0a496 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/lib= pthread.so.0 #1 0x00000000005302bd in ldap_int_thread_pool_wrapper (xpool=3D<value opti= mized out>) at ../../../libraries/libldap_r/tpool.c:712 #2 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #3 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 Thread 7 (process 12408): #0 0x00000037a5a0a496 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/lib= pthread.so.0 #1 0x00000000005302bd in ldap_int_thread_pool_wrapper (xpool=3D<value opti= mized out>) at ../../../libraries/libldap_r/tpool.c:712 #2 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #3 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 Thread 6 (process 12409): #0 0x00000037a5a0a496 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/lib= pthread.so.0 #1 0x00000000005302bd in ldap_int_thread_pool_wrapper (xpool=3D<value opti= mized out>) at ../../../libraries/libldap_r/tpool.c:712 #2 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #3 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 Thread 5 (process 12410): #0 0x00000037a5a0a496 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/lib= pthread.so.0 #1 0x00000000005302bd in ldap_int_thread_pool_wrapper (xpool=3D<value opti= mized out>) at ../../../libraries/libldap_r/tpool.c:712 #2 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #3 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 Thread 4 (process 12411): #0 0x00000037a5a0a496 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/lib= pthread.so.0 #1 0x00000000005302bd in ldap_int_thread_pool_wrapper (xpool=3D<value opti= mized out>) at ../../../libraries/libldap_r/tpool.c:712 #2 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #3 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 Thread 3 (process 12412): #0 0x00000037a4eda178 in __lll_mutex_lock_wait () from /lib64/libc.so.6 #1 0x00000037a4e73c07 in _L_lock_14089 () from /lib64/libc.so.6 #2 0x00000037a4e72a61 in free () from /lib64/libc.so.6 #3 0x0000000000438a99 in connection2anonymous (c=3D0x2af6540b0a50) at ../.= ./../servers/slapd/connection.c:563 #4 0x0000000000438df3 in connection_close (c=3D0x2af6540b0a50) at ../../..= /servers/slapd/connection.c:616 #5 0x0000000000439c50 in connection_operation (ctx=3D0x44e17db0, arg_v=3D<= value optimized out>) at ../../../servers/slapd/connection.c:1159 #6 0x000000000043a201 in connection_read_thread (ctx=3D0x44e17db0, argv=3D= <value optimized out>) at ../../../servers/slapd/connection.c:1440 #7 0x0000000000530268 in ldap_int_thread_pool_wrapper (xpool=3D0x16fafc80)= at ../../../libraries/libldap_r/tpool.c:700 #8 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #9 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 Thread 2 (process 12413): #0 0x00000037a5a0a496 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/lib= pthread.so.0 #1 0x00000000005302bd in ldap_int_thread_pool_wrapper (xpool=3D<value opti= mized out>) at ../../../libraries/libldap_r/tpool.c:712 #2 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #3 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 Thread 1 (process 12405): #0 0x00000037a4e30045 in raise () from /lib64/libc.so.6 #1 0x00000037a4e31ae0 in abort () from /lib64/libc.so.6 #2 0x00000037a4e681bb in __libc_message () from /lib64/libc.so.6 #3 0x00000037a4e6da07 in malloc_consolidate () from /lib64/libc.so.6 #4 0x00000037a4e6f1fb in _int_free () from /lib64/libc.so.6 #5 0x00000037a4e72a6c in free () from /lib64/libc.so.6 #6 0x00000037a4ecabda in __vsyslog_chk () from /lib64/libc.so.6 #7 0x00000037a4ecaf33 in __syslog_chk () from /lib64/libc.so.6 #8 0x0000000000437869 in slapd_daemon_task (ptr=3D<value optimized out>) a= t ../../../servers/slapd/daemon.c:2771 #9 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #10 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 (gdb) thread 3 [Switching to thread 3 (process 12412)]#0 0x00000037a4eda178 in __lll_mute= x_lock_wait () from /lib64/libc.so.6 (gdb) bt #0 0x00000037a4eda178 in __lll_mutex_lock_wait () from /lib64/libc.so.6 #1 0x00000037a4e73c07 in _L_lock_14089 () from /lib64/libc.so.6 #2 0x00000037a4e72a61 in free () from /lib64/libc.so.6 #3 0x0000000000438a99 in connection2anonymous (c=3D0x2af6540b0a50) at ../.= ./../servers/slapd/connection.c:563 #4 0x0000000000438df3 in connection_close (c=3D0x2af6540b0a50) at ../../..= /servers/slapd/connection.c:616 #5 0x0000000000439c50 in connection_operation (ctx=3D0x44e17db0, arg_v=3D<= value optimized out>) at ../../../servers/slapd/connection.c:1159 #6 0x000000000043a201 in connection_read_thread (ctx=3D0x44e17db0, argv=3D= <value optimized out>) at ../../../servers/slapd/connection.c:1440 #7 0x0000000000530268 in ldap_int_thread_pool_wrapper (xpool=3D0x16fafc80)= at ../../../libraries/libldap_r/tpool.c:700 #8 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #9 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 (gdb) fr 3 #3 0x0000000000438a99 in connection2anonymous (c=3D0x2af6540b0a50) at ../.= ./../servers/slapd/connection.c:563 563 if ( !BER_BVISNULL( &c->c_authmech ) ) { (gdb) p * 0x2af6540b0a50 $1 =3D 3 (gdb) thread 1 [Switching to thread 1 (process 12405)]#0 0x00000037a4e30045 in raise () f= rom /lib64/libc.so.6 (gdb) bt #0 0x00000037a4e30045 in raise () from /lib64/libc.so.6 #1 0x00000037a4e31ae0 in abort () from /lib64/libc.so.6 #2 0x00000037a4e681bb in __libc_message () from /lib64/libc.so.6 #3 0x00000037a4e6da07 in malloc_consolidate () from /lib64/libc.so.6 #4 0x00000037a4e6f1fb in _int_free () from /lib64/libc.so.6 #5 0x00000037a4e72a6c in free () from /lib64/libc.so.6 #6 0x00000037a4ecabda in __vsyslog_chk () from /lib64/libc.so.6 #7 0x00000037a4ecaf33 in __syslog_chk () from /lib64/libc.so.6 #8 0x0000000000437869 in slapd_daemon_task (ptr=3D<value optimized out>) a= t ../../../servers/slapd/daemon.c:2771 #9 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #10 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 (gdb) fr 8 #8 0x0000000000437869 in slapd_daemon_task (ptr=3D<value optimized out>) a= t ../../../servers/slapd/daemon.c:2771 2771 Debug( LDAP_DEBUG_ANY, (gdb) thread 3 [Switching to thread 3 (process 12412)]#0 0x00000037a4eda178 in __lll_mute= x_lock_wait () from /lib64/libc.so.6 (gdb) fr 4 #4 0x0000000000438df3 in connection_close (c=3D0x2af6540b0a50) at ../../..= /servers/slapd/connection.c:616 616 backend_connection_destroy(c); (gdb) p * 0x2af6540b0a50 $2 =3D 3 (gdb) fr 3 #3 0x0000000000438a99 in connection2anonymous (c=3D0x2af6540b0a50) at ../.= ./../servers/slapd/connection.c:563 563 if ( !BER_BVISNULL( &c->c_authmech ) ) { (gdb) p * 0x2af6540b0a50 $3 =3D 3 (gdb) quit GNU gdb Red Hat Linux (6.5-25.el5rh) Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you ar= e welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu"...Using host libthread= _db library "/lib64/libthread_db.so.1". Reading symbols from /usr/lib64/libltdl.so.3...done. Loaded symbols for /usr/lib64/libltdl.so.3 Reading symbols from /lib64/libdl.so.2...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libuuid.so.1...done. Loaded symbols for /lib64/libuuid.so.1 Reading symbols from /usr/lib64/libslapd_db-4.7.so...done. Loaded symbols for /usr/lib64/libslapd_db-4.7.so Reading symbols from /usr/lib64/libodbc.so.1...done. Loaded symbols for /usr/lib64/libodbc.so.1 Reading symbols from /usr/lib64/libsasl2.so.2...done. Loaded symbols for /usr/lib64/libsasl2.so.2 Reading symbols from /lib64/libssl.so.6...done. Loaded symbols for /lib64/libssl.so.6 Reading symbols from /lib64/libcrypto.so.6...done. Loaded symbols for /lib64/libcrypto.so.6 Reading symbols from /lib64/libcrypt.so.1...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/libresolv.so.2...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libpthread.so.0...done. Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /usr/lib64/libwrap.so.0...done. Loaded symbols for /usr/lib64/libwrap.so.0 Reading symbols from /lib64/libc.so.6...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/ld-linux-x86-64.so.2...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib64/libgssapi_krb5.so.2...done. Loaded symbols for /usr/lib64/libgssapi_krb5.so.2 Reading symbols from /usr/lib64/libkrb5.so.3...done. Loaded symbols for /usr/lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /usr/lib64/libk5crypto.so.3...done. Loaded symbols for /usr/lib64/libk5crypto.so.3 Reading symbols from /usr/lib64/libz.so.1...done. Loaded symbols for /usr/lib64/libz.so.1 Reading symbols from /lib64/libnsl.so.1...done. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /usr/lib64/libkrb5support.so.0...done. Loaded symbols for /usr/lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libselinux.so.1...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libsepol.so.1...done. Loaded symbols for /lib64/libsepol.so.1 Reading symbols from /lib64/libnss_dns.so.2...done. Loaded symbols for /lib64/libnss_dns.so.2 Reading symbols from /lib64/libnss_files.so.2...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /usr/lib64/sasl2/libplain.so.2...done. Loaded symbols for /usr/lib64/sasl2/libplain.so.2 Reading symbols from /usr/lib64/sasl2/libanonymous.so.2...done. Loaded symbols for /usr/lib64/sasl2/libanonymous.so.2 Reading symbols from /usr/lib64/sasl2/liblogin.so.2...done. Loaded symbols for /usr/lib64/sasl2/liblogin.so.2 Reading symbols from /usr/lib64/openldap/syncprov-2.4.so.2...Reading symbol= s from /usr/lib/debug/usr/lib64/openldap/syncprov-2.4.so.2.5.4.debug...done= . done. Loaded symbols for /usr/lib64/openldap/syncprov-2.4.so.2 Reading symbols from /usr/lib64/openldap/cms_template-2.4.so.2...Reading sy= mbols from /usr/lib/debug/usr/lib64/openldap/cms_template-2.4.so.2.5.4.debu= g...done. done. Loaded symbols for /usr/lib64/openldap/cms_template-2.4.so.2 Reading symbols from /usr/lib64/openldap/cms_modif-2.4.so.2...Reading symbo= ls from /usr/lib/debug/usr/lib64/openldap/cms_modif-2.4.so.2.5.4.debug...do= ne. done. Loaded symbols for /usr/lib64/openldap/cms_modif-2.4.so.2 Reading symbols from /lib64/libgcc_s.so.1...done. Loaded symbols for /lib64/libgcc_s.so.1 Core was generated by `/usr/sbin/slapd -h ldap:/// -u ldap'. Program terminated with signal 6, Aborted. #0 0x00000037a4e30045 in raise () from /lib64/libc.so.6 (gdb) thread apply all bt Thread 3 (process 17892): #0 0x00000037a5a075a5 in pthread_join () from /lib64/libpthread.so.0 #1 0x000000000043402c in slapd_daemon () at ../../../servers/slapd/daemon.= c:2834 #2 0x0000000000420d75 in main (argc=3D5, argv=3D0x7fff3a6ee4b8) at ../../.= ./servers/slapd/main.c:953 Thread 2 (process 17894): #0 0x00000037a5a0a496 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/lib= pthread.so.0 #1 0x000000000052fdab in ldap_pvt_thread_pool_destroy (tpool=3D0x8635e8, r= un_pending=3D487320688) at ../../../libraries/libldap_r/tpool.c:558 #2 0x000000000043767c in slapd_daemon_task (ptr=3D<value optimized out>) a= t ../../../servers/slapd/daemon.c:2764 #3 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #4 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 Thread 1 (process 17895): #0 0x00000037a4e30045 in raise () from /lib64/libc.so.6 #1 0x00000037a4e31ae0 in abort () from /lib64/libc.so.6 #2 0x00000037a4e681bb in __libc_message () from /lib64/libc.so.6 #3 0x00000037a4e6f444 in _int_free () from /lib64/libc.so.6 #4 0x00000037a4e72a6c in free () from /lib64/libc.so.6 #5 0x0000000000559e07 in sb_rdahead_remove (sbiod=3D0x2aaac488d0d0) at ../= ../../libraries/liblber/sockbuf.c:606 #6 0x0000000000559fb9 in ber_sockbuf_free (sb=3D0x2aaac488d0d0) at ../../.= ./libraries/liblber/sockbuf.c:71 #7 0x0000000000000000 in ?? () (gdb) thread 1 [Switching to thread 1 (process 17895)]#0 0x00000037a4e30045 in raise () f= rom /lib64/libc.so.6 (gdb) bt #0 0x00000037a4e30045 in raise () from /lib64/libc.so.6 #1 0x00000037a4e31ae0 in abort () from /lib64/libc.so.6 #2 0x00000037a4e681bb in __libc_message () from /lib64/libc.so.6 #3 0x00000037a4e6f444 in _int_free () from /lib64/libc.so.6 #4 0x00000037a4e72a6c in free () from /lib64/libc.so.6 #5 0x0000000000559e07 in sb_rdahead_remove (sbiod=3D0x2aaac488d0d0) at ../= ../../libraries/liblber/sockbuf.c:606 #6 0x0000000000559fb9 in ber_sockbuf_free (sb=3D0x2aaac488d0d0) at ../../.= ./libraries/liblber/sockbuf.c:71 #7 0x0000000000000000 in ?? () (gdb) frame 5 #5 0x0000000000559e07 in sb_rdahead_remove (sbiod=3D0x2aaac488d0d0) at ../= ../../libraries/liblber/sockbuf.c:606 in ../../../libraries/liblber/sockbuf.c (gdb) p sbiod $1 =3D (Sockbuf_IO_Desc *) 0x2aaac488d0d0 (gdb) p * 0x2aaac488d0d0 $2 =3D 10 (gdb) p * sbiod $3 =3D {sbiod_level =3D 10, sbiod_sb =3D 0x2aaac49fc5c0, sbiod_io =3D 0x7e8= 340, sbiod_pvt =3D 0x2aaac48944c0, sbiod_next =3D 0x0} (gdb) p * 0x2aaac49fc5c0 $4 =3D 3 (gdb) p * 0x2aaac48944c0 $5 =3D 1601201012 (gdb) quit [root@ts2mstsv010 dumps]# From: De Bonis Hamelin, Marie Antoinette (Marian - HP Software - CMS) Sent: Donnerstag, 25. M=E4rz 2010 14:20 To: Hummel, Wolfgang Subject: ldap core analysis Wolfgang, If you check I have let 2 files which have all stack trace for a core.<pid>= on the ldap. In one of the core file txt anayzis, we can see the call to sb_rdahead_remo= ve() just after the libc is doing is malloc/free check and it aborts. I have checked the code (see below), sbiod is not null plus we have an asse= rt in the code. So according to me, p is corrupted because sbiod->sbiod_pvt is not a valid = address. Marian -> openldap/dist/libraries/liblber/sockbuf.c static int sb_rdahead_remove( Sockbuf_IO_Desc *sbiod ) { Sockbuf_Buf *p; assert( sbiod !=3D NULL ); p =3D (Sockbuf_Buf *)sbiod->sbiod_pvt; if ( p->buf_ptr !=3D p->buf_end ) return -1; ber_pvt_sb_buf_destroy( (Sockbuf_Buf *)(sbiod->sbiod_pvt) ); LBER_FREE( sbiod->sbiod_pvt ); sbiod->sbiod_pvt =3D NULL; return 0; } Wolfgang Hummel

1 0

Re: (ITS#6481) Asssert with acl-sets and referals
by raphael.ouazana＠linagora.com 24 Mar '10

24 Mar '10

Le Lun 22 mars 2010 21:51, masarati(a)aero.polimi.it a écrit : > Fixed in HEAD; please test. Thanks, p. > > Thank you, that seems to work fine. Regards, Raphael Ouazana.

1 0

(ITS#6498) SLAPI functions missing
by maci＠satgnu.net 24 Mar '10

24 Mar '10

Full_Name: Marcel Wysocki Version: 2.4.21 OS: GNU/Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (88.79.126.162) I noticed that all of the SLAPI functions do manipulate LDAPMod** are missing. from the fedora ds slapi-plugin.h: /* * LDAPMod manipulation routines */ Slapi_Mods* slapi_mods_new( void ); void slapi_mods_init(Slapi_Mods *smods, int initCount); void slapi_mods_init_byref(Slapi_Mods *smods, LDAPMod **mods); void slapi_mods_init_passin(Slapi_Mods *smods, LDAPMod **mods); void slapi_mods_free(Slapi_Mods **smods); void slapi_mods_done(Slapi_Mods *smods); void slapi_mods_insert_at(Slapi_Mods *smods, LDAPMod *mod, int pos); void slapi_mods_insert_smod_at(Slapi_Mods *smods, Slapi_Mod *smod, int pos); void slapi_mods_insert_before(Slapi_Mods *smods, LDAPMod *mod); void slapi_mods_insert_smod_before(Slapi_Mods *smods, Slapi_Mod *smod); void slapi_mods_insert_after(Slapi_Mods *smods, LDAPMod *mod); void slapi_mods_insert_after(Slapi_Mods *smods, LDAPMod *mod); void slapi_mods_add( Slapi_Mods *smods, int modtype, const char *type, unsigned long len, const char *val); void slapi_mods_add_ldapmod(Slapi_Mods *smods, LDAPMod *mod); void slapi_mods_add_modbvps( Slapi_Mods *smods, int modtype, const char *type, struct berval **bvps ); void slapi_mods_add_mod_values( Slapi_Mods *smods, int modtype, const char *type, Slapi_Value **va ); void slapi_mods_add_smod(Slapi_Mods *smods, Slapi_Mod *smod); void slapi_mods_add_string( Slapi_Mods *smods, int modtype, const char *type, const char *val); void slapi_mods_remove(Slapi_Mods *smods); LDAPMod *slapi_mods_get_first_mod(Slapi_Mods *smods); LDAPMod *slapi_mods_get_next_mod(Slapi_Mods *smods); Slapi_Mod *slapi_mods_get_first_smod(Slapi_Mods *smods, Slapi_Mod *smod); Slapi_Mod *slapi_mods_get_next_smod(Slapi_Mods *smods, Slapi_Mod *smod); void slapi_mods_iterator_backone(Slapi_Mods *smods); LDAPMod **slapi_mods_get_ldapmods_byref(Slapi_Mods *smods); LDAPMod **slapi_mods_get_ldapmods_passout(Slapi_Mods *smods); int slapi_mods_get_num_mods(const Slapi_Mods *smods); void slapi_mods_dump(const Slapi_Mods *smods, const char *text); Slapi_Mod* slapi_mod_new( void ); void slapi_mod_init(Slapi_Mod *smod, int initCount); void slapi_mod_init_byval(Slapi_Mod *smod, const LDAPMod *mod); void slapi_mod_init_byref(Slapi_Mod *smod, LDAPMod *mod); void slapi_mod_init_passin(Slapi_Mod *smod, LDAPMod *mod); /* init a mod and set the mod values to be a copy of the given valueset */ void slapi_mod_init_valueset_byval(Slapi_Mod *smod, int op, const char *type, const Slapi_ValueSet *svs); void slapi_mod_add_value(Slapi_Mod *smod, const struct berval *val); void slapi_mod_remove_value(Slapi_Mod *smod); struct berval *slapi_mod_get_first_value(Slapi_Mod *smod); struct berval *slapi_mod_get_next_value(Slapi_Mod *smod); const char *slapi_mod_get_type(const Slapi_Mod *smod); int slapi_mod_get_operation(const Slapi_Mod *smod); void slapi_mod_set_type(Slapi_Mod *smod, const char *type); void slapi_mod_set_operation(Slapi_Mod *smod, int op); int slapi_mod_get_num_values(const Slapi_Mod *smod); const LDAPMod *slapi_mod_get_ldapmod_byref(const Slapi_Mod *smod); LDAPMod *slapi_mod_get_ldapmod_passout(Slapi_Mod *smod); void slapi_mod_free(Slapi_Mod **smod); void slapi_mod_done(Slapi_Mod *mod); int slapi_mod_isvalid(const Slapi_Mod *mod); void slapi_mod_dump(LDAPMod *mod, int n); /* helper functions to translate between entry and a set of mods */ int slapi_mods2entry(Slapi_Entry **e, const char *dn, LDAPMod **attrs); int slapi_entry2mods(const Slapi_Entry *e, char **dn, LDAPMod ***attrs); there might be some more missing. most of it can be found in fedora ds's modutils.c should be worth porting to openldap

1 0

Re: (ITS#6478) slapd crashes with segfault
by masarati＠aero.polimi.it 23 Mar '10

23 Mar '10

> Hello, here is a backtrace > of the crash, however not yet from > a version with full debug symbols enabled. > We are still working on that. You rbacktrace, although incomplete, looks weird: > #0 0x00000037a4e30045 in raise () from /lib64/libc.so.6 > #1 0x00000037a4e31ae0 in abort () from /lib64/libc.so.6 > #2 0x00000037a4e681bb in __libc_message () from /lib64/libc.so.6 > #3 0x00000037a4e6da07 in malloc_consolidate () from /lib64/libc.so.6 > #4 0x00000037a4e6f1fb in _int_free () from /lib64/libc.so.6 > #5 0x00000037a4e72a6c in free () from /lib64/libc.so.6 > #6 0x00000037a4ecabda in __vsyslog_chk () from /lib64/libc.so.6 > #7 0x00000037a4ecaf33 in __syslog_chk () from /lib64/libc.so.6 > #8 0x0000000000437869 in slapd_remove () > #9 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 > #10 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 libc is raising an assertion during a free related to printing something on syslog. However, in slapd_remove() I don't see anything that could be harmful for syslog, as the only information that may be printed is printed at a very verbose loglevel, and basically consists of integers, so it seems impossible that things like NULL or invalid pointers slip through. p.

1 0

Re: (ITS#6487) Nssov pam_authz authorizedUserService
by crispy＠cluenet.org 23 Mar '10

23 Mar '10

I found that there's an alternate way to achieve this same functionality that's more elegant, probably more efficient, and doesn't require any patches. The approach uses the authorizedService attributes on the host entry. With nssov, individual users can be granted or revoked access based on the slapd ACLs and whether or not they have "compare" access to the authorizedService attribute. I created groups of users underneath the host entry - one for each service - and used regex's in the ACLs to grant compare access to the correct authorizedService attribute when the user is present in the corresponding group. Also the buffer sizes were determined to be a non-issue and do not need to be changed. Chris Breneman On Mon, 2010-03-22 at 00:03 -0500, Kean Johnston wrote: > I like what this offers administrators but I have a comment about how you > handle "wildcards". They aren't wild at all, but "magic strings" with only > one possible meaning: all users/services with the single magic character > "*". If you have a defined user naming convention like i_whatever for > interns and c_whatever for contractors, it would be useful to be able to > either include or exclude such users from using certain services. > > My patch at http://www.openldap.org/its/index.cgi?findid=6495 does this for > userhost and userservices attributes, and includes negation. Would you be > interested in working with me to expand this to support real wildcards? > Also I suggest you make this two patches, as the patch submission > guidelines clearly state that one patch for 1 feature, and the meaty parts > of this are obfuscated by increasing the buffer sizes which should probably > be in a separate patch. > > Regards, Kean

1 0

Re: (ITS#6497) Infinite loop in translucent.c
by masarati＠aero.polimi.it 23 Mar '10

23 Mar '10

Fixed in HEAD; please test. Thanks, p.

1 0

Re: (ITS#6478) slapd crashes with segfault
by wolfgang.hummel＠hp.com 23 Mar '10

23 Mar '10

Hello, here is a backtrace of the crash, however not yet from a version with full debug symbols enabled. We are still working on that. [root@ts2mstsv010 dumps]# gdb /usr/sbin/slapd core.slapd.12403 GNU gdb Red Hat Linux (6.5-25.el5rh) Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you ar= e welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu"...(no debugging symbol= s found) Using host libthread_db library "/lib64/libthread_db.so.1". Reading symbols from /usr/lib64/libltdl.so.3...(no debugging symbols found)= ...done. Loaded symbols for /usr/lib64/libltdl.so.3 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...don= e. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libuuid.so.1...(no debugging symbols found)...d= one. Loaded symbols for /lib64/libuuid.so.1 Reading symbols from /usr/lib64/libslapd_db-4.7.so...(no debugging symbols = found)...done. Loaded symbols for /usr/lib64/libslapd_db-4.7.so Reading symbols from /usr/lib64/libodbc.so.1...(no debugging symbols found)= ...done. Loaded symbols for /usr/lib64/libodbc.so.1 Reading symbols from /usr/lib64/libsasl2.so.2... (no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsasl2.so.2 Reading symbols from /lib64/libssl.so.6...(no debugging symbols found)...do= ne. Loaded symbols for /lib64/libssl.so.6 Reading symbols from /lib64/libcrypto.so.6...(no debugging symbols found)..= .done. Loaded symbols for /lib64/libcrypto.so.6 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...= done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)..= .done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libpthread.so.0... (no debugging symbols found)...done. Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /usr/lib64/libwrap.so.0...(no debugging symbols found)= ...done. Loaded symbols for /usr/lib64/libwrap.so.0 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done= . Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols fo= und)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib64/libgssapi_krb5.so.2...(no debugging symbols= found)...done. Loaded symbols for /usr/lib64/libgssapi_krb5.so.2 Reading symbols from /usr/lib64/libkrb5.so.3... (no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols found).= ..done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /usr/lib64/libk5crypto.so.3...(no debugging symbols fo= und)...done. Loaded symbols for /usr/lib64/libk5crypto.so.3 Reading symbols from /usr/lib64/libz.so.1...(no debugging symbols found)...= done. Loaded symbols for /usr/lib64/libz.so.1 Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...do= ne. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /usr/lib64/libkrb5support.so.0... (no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols found)= ...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libselinux.so.1...(no debugging symbols found).= ..done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libsepol.so.1...(no debugging symbols found)...= done. Loaded symbols for /lib64/libsepol.so.1 Reading symbols from /lib64/libnss_dns.so.2...(no debugging symbols found).= ..done. Loaded symbols for /lib64/libnss_dns.so.2 Reading symbols from /lib64/libnss_files.so.2... (no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /usr/lib64/sasl2/libplain.so.2...(no debugging symbols= found)...done. Loaded symbols for /usr/lib64/sasl2/libplain.so.2 Reading symbols from /usr/lib64/sasl2/libanonymous.so.2...(no debugging sym= bols found)...done. Loaded symbols for /usr/lib64/sasl2/libanonymous.so.2 Reading symbols from /usr/lib64/sasl2/liblogin.so.2...(no debugging symbols= found)...done. Loaded symbols for /usr/lib64/sasl2/liblogin.so.2 Reading symbols from /usr/lib64/openldap/syncprov-2.4.so.2...(no debugging = symbols found)...done. Loaded symbols for /usr/lib64/openldap/syncprov-2.4.so.2 Reading symbols from /usr/lib64/openldap/cms_template-2.4.so.2... (no debugging symbols found)...done. Loaded symbols for /usr/lib64/openldap/cms_template-2.4.so.2 Reading symbols from /usr/lib64/openldap/cms_modif-2.4.so.2...(no debugging= symbols found)...done. Loaded symbols for /usr/lib64/openldap/cms_modif-2.4.so.2 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...= done. Loaded symbols for /lib64/libgcc_s.so.1 Core was generated by `/usr/sbin/slapd -h ldap:/// -u ldap'. Program terminated with signal 6, Aborted. #0 0x00000037a4e30045 in raise () from /lib64/libc.so.6 (gdb) bt #0 0x00000037a4e30045 in raise () from /lib64/libc.so.6 #1 0x00000037a4e31ae0 in abort () from /lib64/libc.so.6 #2 0x00000037a4e681bb in __libc_message () from /lib64/libc.so.6 #3 0x00000037a4e6da07 in malloc_consolidate () from /lib64/libc.so.6 #4 0x00000037a4e6f1fb in _int_free () from /lib64/libc.so.6 #5 0x00000037a4e72a6c in free () from /lib64/libc.so.6 #6 0x00000037a4ecabda in __vsyslog_chk () from /lib64/libc.so.6 #7 0x00000037a4ecaf33 in __syslog_chk () from /lib64/libc.so.6 #8 0x0000000000437869 in slapd_remove () #9 0x00000037a5a062e7 in start_thread () from /lib64/libpthread.so.0 #10 0x00000037a4ece3bd in clone () from /lib64/libc.so.6 (gdb) Wolfgang Hummel

1 0

Re: (ITS#6495) nssov patch to better emulate pam_ldap behaviour
by quanah＠zimbra.com 23 Mar '10

23 Mar '10

--On Monday, March 22, 2010 9:00 PM -0700 Quanah Gibson-Mount <quanah(a)zimbra.com> wrote: > As already noted, there is no need to give root access to admins. My > guess is you really do not understand how ACLs work. I would advise > carefully reading the slapd-access(5) man page. You may also find a page I wrote some time ago useful in helping to understand how ACLs work: <http://www.stanford.edu/services/directory/openldap/configuration/slapd-acl…> Regards, Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#6495) nssov patch to better emulate pam_ldap behaviour
by quanah＠zimbra.com 23 Mar '10

23 Mar '10

--On Monday, March 22, 2010 12:41 PM +0000 kean.johnston(a)gmail.com wrote: >> Authorization is the job of the ACL engine. Putting ad-hoc rules into >> user entries is, in a word, stupid. It's also unscaleable and will >> become an administration nightmare. > Well OK then. Using a configuration mechanism like ACL's that cannot be > distributed to multiple users (like editing a directory can) is, in a > word, stupid. It is also unscaleable and will become an administration > nightmare. And authorisation is not (or SHOULD not be) the job of ACL's > its the job of authorisation modules, which nssov is. > > Being forced to give admins who simply want to be able to change access > to a random host in a centralised server root access to what may be a > critical server with other sensitive data on it is simply wrong. As already noted, there is no need to give root access to admins. My guess is you really do not understand how ACLs work. I would advise carefully reading the slapd-access(5) man page. Regards, Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs