openldap-bugs

openldap-bugs@openldap.org

1 participants
21001 discussions

Re: (ITS#9037) observing crash in mdb_cursor_put()
by vporof＠mozilla.com 14 Aug '19

14 Aug '19

Thanks for getting back! The files at https://github.com/mozkeeler/rkv-fuzz/tree/trunk/crashes are fuzzed variants of the input data seeded from the mdb input here: They're generated when running the `american fuzzy lop` fuzzer: http://lcamtuf.coredump.cx/afl/. Victor

1 0

Re: (ITS#9037) observing crash in mdb_cursor_put()
by hyc＠symas.com 14 Aug '19

14 Aug '19

vporof(a)mozilla.com wrote: > Quick update on this. > > Potentially useful to the efforts here, Dana Keeler has implemented a = > fuzzing harness for RKV (our typed Rust interface to LMDB): = > https://github.com/mozkeeler/rkv-fuzz > > We weren't able to trigger the `mdb_cursor_put` crashes reported at = > https://crash-stats.mozilla.org/signature/?signature=3Dmdb_cursor_put#repo= > rts, though we did end up finding a few others: = > https://github.com/mozkeeler/rkv-fuzz/tree/trunk/crashes What kinds of files are these, in the crashes directory? > > Howard, do any of those look familiar and potentially related? > > Victor > > > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#9037) observing crash in mdb_cursor_put()
by vporof＠mozilla.com 14 Aug '19

14 Aug '19

Quick update on this. Potentially useful to the efforts here, Dana Keeler has implemented a = fuzzing harness for RKV (our typed Rust interface to LMDB): = https://github.com/mozkeeler/rkv-fuzz We weren't able to trigger the `mdb_cursor_put` crashes reported at = https://crash-stats.mozilla.org/signature/?signature=3Dmdb_cursor_put#repo= rts, though we did end up finding a few others: = https://github.com/mozkeeler/rkv-fuzz/tree/trunk/crashes Howard, do any of those look familiar and potentially related? Victor

1 0

RE: [External] Re: (ITS#9062) Please have /build/mkdep respect TMPDIR if set
by zagarc＠oclc.org 13 Aug '19

13 Aug '19

--_000_BYAPR06MB4311BFD5C8DDA97A03E2D86AA1D20BYAPR06MB4311namp_ Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Thank you! Chris From: Quanah Gibson-Mount <quanah(a)symas.com> Sent: Tuesday, August 13, 2019 8:06 AM To: Zagar (Contractor),Chris <zagarc(a)oclc.org>; openldap-its(a)OpenLDAP.org Subject: [External] Re: (ITS#9062) Please have /build/mkdep respect TMPDIR = if set --On Sunday, August 11, 2019 7:34 PM +0000 zagarc(a)oclc.org<mailto:zagarc@oc= lc.org> wrote: > Would you please consider changing this to: > > TMP=3D${TMPDIR-/tmp}/mkdep$$ Thanks for the report, this is fixed in OpenLDAP master. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com<http://www.symas.com>> --_000_BYAPR06MB4311BFD5C8DDA97A03E2D86AA1D20BYAPR06MB4311namp_ Content-Type: text/html; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"EN-US" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> <p class=3D"MsoNormal">Thank you!<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Chris<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <div> <div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b>From:</b> Quanah Gibson-Mount <quanah(a)symas.co= m> <br> <b>Sent:</b> Tuesday, August 13, 2019 8:06 AM<br> <b>To:</b> Zagar (Contractor),Chris <zagarc(a)oclc.org>rg>; openldap-its@O= penLDAP.org<br> <b>Subject:</b> [External] Re: (ITS#9062) Please have /build/mkdep respect = TMPDIR if set<o:p></o:p></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><br> --On Sunday, August 11, 2019 7:34 PM +0000 <a href=3D"mailto:zagarc@ocl= c.org">zagarc(a)oclc.org</a> wrote:<br> <br> > Would you please consider changing this to:<br> ><br> > TMP=3D${TMPDIR-/tmp}/mkdep$$<br> <br> Thanks for the report, this is fixed in OpenLDAP master.<br> <br> Regards,<br> Quanah<br> <br> --<br> <br> Quanah Gibson-Mount<br> Product Architect<br> Symas Corporation<br> Packaged, certified, and supported LDAP solutions powered by OpenLDAP:<br> <<a href=3D"http://www.symas.com">http://www.symas.com</a>><o:p></o:p= ></p> </div> </body> </html> --_000_BYAPR06MB4311BFD5C8DDA97A03E2D86AA1D20BYAPR06MB4311namp_--

1 0

Re: (ITS#9055) contrib/slapd-modules/passwd/totp improvements
by gv＠members.scinet.supercomputing.org 13 Aug '19

13 Aug '19

On Wed, Jul 31, 2019 at 04:14:48PM -0400, Greg Veldman wrote: > v3 of the patch is available, which includes hashing functions > and documents the expected input format when using those functions. > I don't have the updated module on any of my servers yet, but > running slappasswd from my build directory does seem to yield > the same results as the non-password versions: Hi, Sorry to press the issue again, but with the hash functions implemented is there anything else preventing this patch from being merged? Thanks. -- Greg Veldman

1 0

Re: (ITS#9037) observing crash in mdb_cursor_put()
by vporof＠mozilla.com 13 Aug '19

13 Aug '19

Apologies for the previous botched message, I was unfamiliar with the formatting rules for this list. To reiterate: Since the link to the crash stats from my earlier reply now expired, here's an up to date place to see all recent crash reports involving `mdb_cursor_put`: https://crash-stats.mozilla.org/signature/?signature=mdb_cursor_put#reports Victor

1 0

Re: (ITS#9037) observing crash in mdb_cursor_put()
by vporof＠mozilla.com 13 Aug '19

13 Aug '19

--Apple-Mail=_F8BCAB64-A19B-4B00-B41B-03BE06C12A1F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On 6. Aug 2019, at 13:43, Victor Porof <vporof(a)mozilla.com> wrote: >=20 > Here's everything we know about: = https://crash-stats.mozilla.org/report/index/5d77bd19-41ce-459f-9c1c-7f9fb= 0190324 See the "details" and "telemetry environment" sections for a = breakdown. Since that link is now expired, here=E2=80=99s an up to date place to = see all recent crash reports involving `mdb_cursor_put`: = https://crash-stats.mozilla.org/signature/?signature=3Dmdb_cursor_put#repo= rts = <https://crash-stats.mozilla.org/signature/?signature=3Dmdb_cursor_put#rep= orts>=20 Victor= --Apple-Mail=_F8BCAB64-A19B-4B00-B41B-03BE06C12A1F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><br = class=3D""><div><blockquote type=3D"cite" class=3D""><div class=3D"">On = 6. Aug 2019, at 13:43, Victor Porof <<a = href=3D"mailto:vporof@mozilla.com" class=3D"">vporof(a)mozilla.com</a>> = wrote:</div><div class=3D""><div class=3D""><br class=3D"">Here's = everything we know about: <a = href=3D"https://crash-stats.mozilla.org/report/index/5d77bd19-41ce-459f-9c= 1c-7f9fb0190324" = class=3D"">https://crash-stats.mozilla.org/report/index/5d77bd19-41ce-459f= -9c1c-7f9fb0190324</a> See the "details" and "telemetry environment" = sections for a breakdown.<br class=3D""></div></div></blockquote><div><br = class=3D""></div>Since that link is now expired, here=E2=80=99s an up to = date place to see all recent crash reports involving = `mdb_cursor_put`: <a = href=3D"https://crash-stats.mozilla.org/signature/?signature=3Dmdb_cursor_= put#reports" = class=3D"">https://crash-stats.mozilla.org/signature/?signature=3Dmdb_curs= or_put#reports</a> <div class=3D""><br class=3D""></div><div = class=3D"">Victor</div></div></body></html>= --Apple-Mail=_F8BCAB64-A19B-4B00-B41B-03BE06C12A1F--

1 0

Re: (ITS#9062) Please have /build/mkdep respect TMPDIR if set
by quanah＠symas.com 13 Aug '19

13 Aug '19

--On Sunday, August 11, 2019 7:34 PM +0000 zagarc(a)oclc.org wrote: > Would you please consider changing this to: > > TMP=${TMPDIR-/tmp}/mkdep$$ Thanks for the report, this is fixed in OpenLDAP master. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

(ITS#9063) tls_reqcert in slapd.conf/slapd-config man pages should be bold
by quanah＠openldap.org 13 Aug '19

13 Aug '19

Full_Name: Quanah Gibson-Mount Version: 2.4.48 OS: N/A URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (47.208.128.44) When looking at the man pages, the tls_reqcert description in the section of the man page about syncrepl is missing a BOLD tag, unlike the other keywords. Trivial fix.

1 0

(ITS#9062) Please have /build/mkdep respect TMPDIR if set
by zagarc＠oclc.org 11 Aug '19

11 Aug '19

Full_Name: Chris Zagar Version: 2.4.48 OS: Linux URL: Submission from: (NULL) (68.98.212.84) /build/mkdep contains this line: TMP=/tmp/mkdep$$ that forces the use of the /tmp directory. The /tmp directory is vulnerable to race conditions. The rest of OpenLDAP obeys the TMPDIR environment variable if it exists as a mitigation to this risk. Would you please consider changing this to: TMP=${TMPDIR-/tmp}/mkdep$$ so this will obey TMPDIR as well? Thank you. Chris Zagar zagarc(a)oclc.org

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs