openldap-bugs

openldap-bugs@openldap.org

1 participants
20959 discussions

Re: (ITS#7968) SIGSEGV shortly after reconnection performed by syncrepl due to synchronization conflicts
by leo＠yuriev.ru 29 Nov '14

29 Nov '14

current OPENLDAP_REL_ENG_2_4 (6b26910 Silence compiler warning...) with merge-in current mdb.master (9a72292 ITS#7961,#7987 Re-fix txn init) - cluster of 4 node, but on single machine. - only localback network, no any failures. - multi-master by config, but all writes come only to first node. Testcase will be available shortly (config + script). Core was generated by `/opt/openldap.devel/libexec/slapd -l LOCAL5 -d 0 -s 0 -4 -h ldap://10.4.0.1:1114'. Program terminated with signal 11, Segmentation fault. #0 0x00007ff68564d07b in ?? () from /lib/x86_64-linux-gnu/libc.so.6 (gdb) bt #0 0x00007ff68564d07b in ?? () from /lib/x86_64-linux-gnu/libc.so.6 #1 0x000000000047fb3c in do_syncrep2 (op=0x7ff62f7fd740, si=0x1c74190) at syncrepl.c:934 #2 0x00000000004838c3 in do_syncrepl (ctx=<optimised out>, arg=0x1c746d0) at syncrepl.c:1539 #3 0x00000000004250a8 in connection_read_thread (ctx=0x7ff62f7fdbd0, argv=0x35) at connection.c:1293 #4 0x00007ff685ceecf2 in ldap_int_thread_pool_wrapper (xpool=0x1c27090) at tpool.c:688 #5 0x00007ff6858b90a5 in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0 #6 0x00007ff6855e684d in clone () from /lib/x86_64-linux-gnu/libc.so.6 > if ( !BER_BVISNULL( &syncCookie.octet_str ) ) > { > slap_parse_sync_cookie( &syncCookie, NULL ); > if ( syncCookie.ctxcsn ) { > int i, sid = slap_parse_csn_sid( syncCookie.ctxcsn ); > check_syncprov( op, si ); > for ( i =0; i<si->si_cookieState->cs_num; i++ ) { > /* new SID */ > if ( sid < si->si_cookieState->cs_sids[i] ) > break; > if ( si->si_cookieState->cs_sids[i] == sid ) { syncrepl.c:934 > if ( ber_bvcmp( syncCookie.ctxcsn, &si->si_cookieState->cs_vals[i] ) <= 0 ) { > bdn.bv_val[bdn.bv_len] = '\0'; > Debug( LDAP_DEBUG_SYNC, "do_syncrep2: %s CSN too old, ignoring %s (%s)\n", > si->si_ridtxt, syncCookie.ctxcsn->bv_val, bdn.bv_val ); > ldap_controls_free( rctrls ); > rc = 0; > si->si_too_old = 1; > goto done; > } > si->si_too_old = 0; > break; > } > }

1 0

Re: (ITS#7987) SIGSEGV in LMDB while adding ldap-entries
by leo＠yuriev.ru 28 Nov '14

28 Nov '14

(1) ITS#7968 not fixed - still crash in a few 'favorite' locations - last time SIGSEGV in do_syncrep2() at "if ( ber_bvcmp( syncCookie.ctxcsn, &si->si_cookieState->cs_vals[i] ) <= 0 )" (2) mdb.master seems to be have another bug(s), that also was fixed in the 'mdb/fixes' branch on git://git.uio.no/u/hbf/openldap.git - just a cherry-pick of ead57604 fixes this SIGSEGV, but I got a 'implementation specific' error in heavy add/delete test (same as in the attached testcase). - but merge 'mdb/fixes' passed my test. (3) OPENLDAP_REL_ENG_2_4 without merge current mdb.master and after revert all 4d02c741-related changes (single write txn) also passed my test. Leonid. 2014-11-28 22:06 GMT+03:00 Howard Chu <hyc(a)symas.com>: > leo(a)yuriev.ru wrote: >> >> Sure this bug is introduced by the 4d02c741 (Use a single write txn). >> >> Could be fixed by: >> cherry-pick ead57604 (ITS#7961 Re-fix txn init) from >> git://git.uio.no/u/hbf/openldap.git >> or >> revert: d72b2f5d (ITS#7961 fix txn init), 62e4eeb7 (ITS#7943 reinit >> txn flags), 891e6627 (Plug leak in 4d02c741...) and 4d02c741 (Use a >> single write txn). > > > Totally fixed? Or are you still seeing the ITS#7968 crash now? So far I've > run your testcase on the patched source (with ead57604) and gotten no > crashes. > > -- > -- Howard Chu > CTO, Symas Corp. http://www.symas.com > Director, Highland Sun http://highlandsun.com/hyc/ > Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7987) SIGSEGV in LMDB while adding ldap-entries
by hyc＠symas.com 28 Nov '14

28 Nov '14

leo(a)yuriev.ru wrote: > Sure this bug is introduced by the 4d02c741 (Use a single write txn). > > Could be fixed by: > cherry-pick ead57604 (ITS#7961 Re-fix txn init) from > git://git.uio.no/u/hbf/openldap.git > or > revert: d72b2f5d (ITS#7961 fix txn init), 62e4eeb7 (ITS#7943 reinit > txn flags), 891e6627 (Plug leak in 4d02c741...) and 4d02c741 (Use a > single write txn). Totally fixed? Or are you still seeing the ITS#7968 crash now? So far I've run your testcase on the patched source (with ead57604) and gotten no crashes. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7987) SIGSEGV in LMDB while adding ldap-entries
by leo＠yuriev.ru 28 Nov '14

28 Nov '14

Sure this bug is introduced by the 4d02c741 (Use a single write txn). Could be fixed by: cherry-pick ead57604 (ITS#7961 Re-fix txn init) from git://git.uio.no/u/hbf/openldap.git or revert: d72b2f5d (ITS#7961 fix txn init), 62e4eeb7 (ITS#7943 reinit txn flags), 891e6627 (Plug leak in 4d02c741...) and 4d02c741 (Use a single write txn). Leonid.

1 0

Re: (ITS#7987) SIGSEGV in LMDB while adding ldap-entries
by leo＠yuriev.ru 27 Nov '14

27 Nov '14

confirm - this bug seems to be fixed (just merge with 'mdb/fixes' from git://git.uio.no/u/hbf/openldap.git). but now is another, like http://www.openldap.org/its/index.cgi/Incoming?id=7968 #3 0x00007f5061836c82 in __assert_fail () from /lib/x86_64-linux-gnu/libc.so.6 #4 0x00007f5061df4553 in ber_int_sb_write (sb=sb@entry=0x7f5024105870, buf=0x7f4ff80019d0, len=len@entry=152) at sockbuf.c:441 #5 0x00007f5061df0b8b in ber_flush2 (sb=0x7f5024105870, ber=ber@entry=0x7f500cffb330, freeit=freeit@entry=0) at io.c:246 #6 0x0000000000433dce in send_ldap_ber (op=0x7f500cffb7c0, ber=0x7f500cffb330) at result.c:339 #7 0x00000000004367a6 in slap_send_search_entry (op=0x7f500cffb7c0, rs=0x7f500cffb5c0) at result.c:1430 #8 0x000000000051077a in syncprov_sendresp (mode=<optimised out>, so=<optimised out>, opc=<optimised out>, op=<optimised out>) at syncprov.c:895 #9 syncprov_qplay (so=<optimised out>, op=<optimised out>) at syncprov.c:944 #10 syncprov_qtask (ctx=0x7f4ff81086c8, arg=0x7f4ff8108670) at syncprov.c:1010 #11 0x00007f5062009d12 in ldap_int_thread_pool_wrapper (xpool=0xd3b070) at tpool.c:688 #12 0x00007f5061bd40a5 in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0 #13 0x00007f506190184d in clone () from /lib/x86_64-linux-gnu/libc.so.6 (gdb) frame 4 #4 0x00007f5061df4553 in ber_int_sb_write (sb=sb@entry=0x7f5024105870, buf=0x7f4ff80019d0, len=len@entry=152) at sockbuf.c:441 441 assert( sb->sb_iod != NULL ); (gdb) info local ret = <optimised out> __PRETTY_FUNCTION__ = "ber_int_sb_write" (gdb) p *sb $1 = {sb_opts = {lbo_valid = 3, lbo_options = 0, lbo_debug = 16384}, sb_iod = 0x0, sb_fd = 75, sb_max_incoming = 262143, sb_trans_needs_read = 0, sb_trans_needs_write = 0} tail xxx.log 54775e18 syncrepl_entry: rid=001 cn=tablet,uid=1040,dc=ngdr,dc=ldap 54775e18 slap_queue_csn: queueing 0x7f5020107890 20141127172334.589180Z#000000#001#000000 54775e18 syncprov_matchops: skipping original sid 001 54775e18 slap_graduate_commit_csn: removing 0x7f502012d740 20141127172334.589180Z#000000#001#000000 54775e18 syncrepl_entry: rid=001 be_delete cn=tablet,uid=1040,dc=ngdr,dc=ldap (0) 54775e18 slap_queue_csn: queueing 0x7f5020107890 20141127172334.589180Z#000000#001#000000 54775e18 slap_graduate_commit_csn: removing 0x7f5020108020 20141127172334.589180Z#000000#001#000000 54775e18 do_syncrep2: rid=001 cookie=rid=001,sid=001,csn=20141127172334.589328Z#000000#001#000000 54775e18 syncrepl_message_to_entry: rid=001 DN: cn=tablet,uid=1793,dc=ngdr,dc=ldap, UUID: dc4d5d30-0aa5-1034-8ff5-a9ee5a485f53 slapd: sockbuf.c:441: ber_int_sb_write: Assertion `sb->sb_iod != ((void *)0)' failed. 2014-11-27 13:07 GMT+03:00 Hallvard Breien Furuseth <h.b.furuseth(a)usit.uio.no>: > On 11/27/2014 10:26 AM, leo(a)yuriev.ru wrote: >> >> # possible first bad commit: >> [4d02c741b120786df1b87ee9ed49c1d3f9bc7522] Use a single write txn > > > Partly fixed in mdb.master, but I think branch "mdb/fixes" > in <git://git.uio.no/u/hbf/openldap.git> is needed too. > That is, the "[Untested] ITS#7961 Re-fix txn init." commit. > Both branches have some remaining problems, however. > > -- > Hallvard

1 0

Re: (ITS#7987) SIGSEGV in LMDB while adding ldap-entries
by h.b.furuseth＠usit.uio.no 27 Nov '14

27 Nov '14

On 11/27/2014 10:26 AM, leo(a)yuriev.ru wrote: > # possible first bad commit: > [4d02c741b120786df1b87ee9ed49c1d3f9bc7522] Use a single write txn Partly fixed in mdb.master, but I think branch "mdb/fixes" in <git://git.uio.no/u/hbf/openldap.git> is needed too. That is, the "[Untested] ITS#7961 Re-fix txn init." commit. Both branches have some remaining problems, however. -- Hallvard

1 0

Re: (ITS#7987) SIGSEGV in LMDB while adding ldap-entries
by leo＠yuriev.ru 27 Nov '14

27 Nov '14

--f46d043c06bcb68d180508d3bcbe Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Two runs gave the same result, bisect-testcase attached. sudo will be called for ramfs-mount and ifconfig for ip-aliases (for cluste= r). mkdir xxx cd xxx tar xaf its7987-gitbisect-testcase.tar.gz git clone git://git.openldap.org/openldap.git openldap-source cd openldap-source git checkout OPENLDAP_REL_ENG_2_4 git bisect start 'OPENLDAP_REL_ENG_2_4' 'OPENLDAP_REL_ENG_2_4_39' git bisect run ../git-bisect-probe.sh git bisect log # bad: [6b26910c5acbf141ff322d043b3301d0976a7913] Silence compiler warning by adding explicit return 0 to ppolicy_db_destroy # good: [6bfa8256161618e62e56d139243aa234b3ece875] Prep for release git bisect start 'OPENLDAP_REL_ENG_2_4' 'OPENLDAP_REL_ENG_2_4_39' # good: [0e104da454c0f59c6d3195add38c935179de2cb3] Merge remote-tracking branch 'origin/mdb.master' into OPENLDAP_REL_ENG_2_4 git bisect good 0e104da454c0f59c6d3195add38c935179de2cb3 # good: [5e4cc6d1c515ace1e0c151ca8986bf805f203834] ITS#7895, ITS#7915 git bisect good 5e4cc6d1c515ace1e0c151ca8986bf805f203834 # good: [d871d328544124573bdbf63e360c4bb47e6c0d38] ITS#7702 git bisect good d871d328544124573bdbf63e360c4bb47e6c0d38 # good: [e4c848e24ff36139eb235efe7f426d89e01056ae] ITS#7915 fix memory leaks in previous patch git bisect good e4c848e24ff36139eb235efe7f426d89e01056ae # bad: [0659ef45d486b5daaafc020cb67b561a8029036d] ITS#7941 fix for repeated= tags git bisect bad 0659ef45d486b5daaafc020cb67b561a8029036d # bad: [5ebeec95535786ce7a0e80173209e33f64ab9013] Merge remote-tracking branch 'origin/mdb.master' into OPENLDAP_REL_ENG_2_4 git bisect bad 5ebeec95535786ce7a0e80173209e33f64ab9013 # skip: [29fd241fadc3dd49b3486f0e3556b029b716bcbf] Remember oldest reader t= xnid git bisect skip 29fd241fadc3dd49b3486f0e3556b029b716bcbf # skip: [3646ba966c75137b01e38fc5baea6d5864189c8e] More for me_pgoldest git bisect skip 3646ba966c75137b01e38fc5baea6d5864189c8e # skip: [4d02c741b120786df1b87ee9ed49c1d3f9bc7522] Use a single write txn git bisect skip 4d02c741b120786df1b87ee9ed49c1d3f9bc7522 # skip: [5ee99f1125a775f28ed69b06d991a43c60d894a9] Change retry to num times 60. Testing shows that on a known dataset, this has the same growth behavior as 2.4.39, while num times 20 resulted in significant growth. git bisect skip 5ee99f1125a775f28ed69b06d991a43c60d894a9 # only skipped commits left to test # possible first bad commit: [5ebeec95535786ce7a0e80173209e33f64ab9013] Merge remote-tracking branch 'origin/mdb.master' into OPENLDAP_REL_ENG_2_4 # possible first bad commit: [5ee99f1125a775f28ed69b06d991a43c60d894a9] Change retry to num times 60. Testing shows that on a known dataset, this has the same growth behavior as 2.4.39, while num times 20 resulted in significant growth. # possible first bad commit: [3646ba966c75137b01e38fc5baea6d5864189c8e] More for me_pgoldest # possible first bad commit: [29fd241fadc3dd49b3486f0e3556b029b716bcbf] Remember oldest reader txnid # possible first bad commit: [4d02c741b120786df1b87ee9ed49c1d3f9bc7522] Use a single write txn 2014-11-26 22:11 GMT+03:00 =D0=9B=D0=B5=D0=BE=D0=BD=D0=B8=D0=B4 =D0=AE=D1= =80=D1=8C=D0=B5=D0=B2 <leo(a)yuriev.ru>: > Just run a 'runme.sh' from attached tarball. > Problem (coredump) usually is reproduced for 10-20 min. > I will try 'git bisect'. > > Leonid. --f46d043c06bcb68d180508d3bcbe Content-Type: application/x-gzip; name="its7987-gitbisect-testcase.tar.gz" Content-Disposition: attachment; filename="its7987-gitbisect-testcase.tar.gz" Content-Transfer-Encoding: base64 X-Attachment-Id: f_i2zwyqwk1 H4sIAIHtdlQAA+07XVPjSJL9av2KbGEGuduSLYOh2z2eaxrcM8QwQGD69iZYgpClsq1BHx6VzMc0 PNze6/6Y3Y3d23u4299A/6PLrJJsyTYGehtmNoLqNlZlZWVlZWVlZmXJPTfWOy5ndqwPorDDDN5/ 9qVLFctavU7f5lq9mv2mUjNX156ZtZXler26srq6/KyKldrKM6h+cU5mlCGPrQjgmXcxH++29n/R svC80nGDSsfifUX5duvgeHNrv1nUImY5nhucgN6FojY4c0olpd3afp80O24UWD6DCcQqYu3tt95v /Uez+DFFv6r0WcR07lkDR1G6w8CO3TCAztD1HK0EH5WC7UAxGRouL4GduzGYtbpS6OGD7TErIOr6 OehOvt3twiE8p0ajYodB1+0NIwZHbyDus2CE9wa6rlLIYuio66zrniOXkt0rBLHA6nhMdy4Cy/bG dc+xBuNaeMoiz7rgCHFcLkCoP7Fr5wn4ApBidJxOptbHWm4WvnXCwGEDFjjw1VcgqvpPK6NnN8Ah PC/X6SojSbFvx5JM5U79I5+EY4c4Z6wZlWgY+Ex3Y772+tUabvU8I8zuh6C+eLACqliymPGYVo0J xuRiKYXx6LD7PSIWIsaHXtwMT5Axj7Mcxvv1re0MTtcSCLTMjzAHlL1QXkWxw2EQs6hZVTzXd+Pm mnLWdz2GSllMmkD3YiiKVtJLJ8Q1SjoVNW2E9RJM3DqZCUaoDlZiksfEwm5CC+cumpItUJRygOdN UMMTNd0BKKAO7s8TIRknDJjyCNLhHmMDMKuKMuarmfKlCGUr/pvya5u9p5IUN3Bjw3Pc7gOOQU5+ dXXlJv9fXa3XyP/XzLpp1qsm+v9q3aw++f/HKE7QAMdukpdTws5PGAdueBbnDQijnhW4v1jkYvIt cTiB6ti7oqo4dgMkpQZ84CzatGJrnw1C7sZhdKEoNNjQdZqW47tBOR0WIQ0QoFvGsWxhCMd00Ep6 rm2VZ04gxZ5Pk7v+wGNtZg8jN75I5iE4SogrQ5zIHuKehRFCzy9+kePjmEHPiWaPnRPewj2kRyRv kN7DrL8fOsygyOhhyIty2/43V1Zk/I8nAPx+2v+PWBRUNIxptzbh7dbmW0Xx3SgKI9IKONj/0FKS gBf4RWBjyHGqpA+63Wf2ySB0A4weq1Uwxy0R80LL6VOLoPFrz/Gp3FwSK/egJuC2/b+8Vh/5/+W1 Ndz/Zu1p/z9OEbuWlAAidKjCBtDR4tR18Ijydn1zcx8B8cWAobPtYjjfXw+cPRZxl8cKHr/i6KKp 1uGlCrHrs3AYN80qnOAJwPLcU9ZUzQb+w9MKZ1Zk9zsWR9iE58RWK44j3lRflF9ipeMGjs/ifug0 pXOWICdoqjN8PnZA9h0WxC4eApvkngvEijyQDQPxzRzkwP1lCvhrC/83UCYzAg8xxvz8Hzp7uf/R +6+u1tfI/5v11drT/n+Mksv/fdfabzVluk95t7Ujcn0fCZjL4W2uH6xPNTkYrCob2x/aBy1KEHL2 M5hQLynKiet5lL3SfwbRHXzmi9BBt3xndUX33GB4TtmpJHGgyJzVC8Pp9PBvfB6LNJGiiLSRfg5G JRywgPa+zsNhZLNMYu/3SuHyEjSZNwwDBvjUqFTwr5F2MjA2H1EwCHOCHBEpID+2M9WCUEGa2Edb B7t7rZ3tzfW94/3W9nFr59vj2vFKKWEizXSM+C5+lCK9qnCSOAnDchzQrdmTknEZF3hOxfDcTvJM OTttBnM4bMqfTJmei6ypkzTckP9MeHrk/KdkaVbicyLpeaM0pwWGEoqsyGWcnjzf6VTwc0zcJTRk YnXjLl1nj+rgGibKf5VMgZQ16mbglReTff0Tx41AH0x31nw6oMIl9NCpZZuxOx86Ich2PYbYH3Q5 7K//kMGaEk03jCBAwSFOshGvZMZxZ3ezJTfsiMsAA/zjYoAuPJ1AgkQToDUYMz1qOLUiSiBPgmjn Z2EstiHLFvp+B1R+mYx9OUa97L3hl1IBL0eaeNlT4WtIbYvQeBGcwjcTg2TbcuPJlKh2hip4Bl9/ /TWoY4GoJdB7eGDJpEhJbNEssRXS5CrlVYtBpkuhQIFRUyUdQvNiVo1iZFQNs1HUNJMKvMRupVJF FciJACi4uixGYtYysros0ld+xtmAHL6546RxEEp+F0SSd2LAIE9/dOC/O3EkrRS2drYORiZ/lDVU CpUhj4QLoagLtzkaiE7I8SkENG96UaOgT14WpUtc0ouBMOw3mcTuHMZ0DxuJGbRZbVoWXOTaN3OH Ik+Snc9CD3f4TWOzcxQdi8GKevzunJypomd0X1a2t9oHx6gEL5vabdIqYWAbDu1+liMMfS0MZA2x 7vTnzWeaAfJiOX0OpvQ5QH2GFKO2hu0pRnX5dTXFUKVJ6SID3XDufMgykJFzu9IxgRc2cDlHg0PA Yt/iJ1Cr143MB4YDJXtVQvFbjDTVubp4KztkTcc6gX6AnbNkuUHvkw0hGV2ptOzbuxvr23VyCObq 8qsV0DlUQV+Zry61b87C6GS+anwlNQK14VZ+UR3SiEmsvqzUFOU2IQwu8GwVzKYtBCER0E2S17MR aXQ8GFwoyRVS80sX9Wa9zevmPM0bKwUpNgqqgUDqKI+foH8HRaKGAcT29vZmmvgGvTN+PAPOcFvF tKgkIdgIg5idxxvtnewd2gMIQNHSu7M3kEbNQn/eJLFxfQyfFUSXUH0Ec3oA6u8stDAkUjukMzQl og3DUMm3n1ETfsuJgA40LfUzDcccbbOt+N7mH/vcanSTtdVHTihrUcUSje85E2VuiImLMAtXNwwc fre9oOz9ePDd7s5xu7Wxu7PZxoONoIH24F5kMMSzhyKAXGos0fxqCBlYPEY5ceclVjp2KWEakoIh R37wz10hEcTo/A4W8GjGXfxoI8kXCO4RdM8KE3XWTcPdpcUlHEiKk4H6nu7N+QWKxAc8Wg2GMSeX mpfzXHdSKDwQe/bIAEyr3vhqvb29vrc5R1F0HYck43749ujqbgqBccF8ghWHnVaCoeclpCmSuDv5 KX3LTaEMaUiELRlOUA0Tvdxr7W+0djAo1CSlCX2FF+JeoALaZMPLiaFKasKRhE7RzSF/BllpFJlU 6KLUGzxMHWztNlBw+dlcLe4h7eLHHCtXi+3fY3yhLMhz4PiNGgok73N0122ZzBDWqvpbyD+OTevD jXFL/r9WX66N7/+qq3T/t7r2lP97lLIA7zbfwTvLPqEsTJoiEhfX0EWbrCxAmzEYq4lWL4m4wmGx 5XocEC/fKxzQFzew50Hf5YIK8H449BzY2T2ADgMMhLFCrw5SRggxhzbZX31gxX204rKmKG5ge0OH FQpyy4pQIN1rFY7xj29VaDsZ8vmO+NwN7tnD85gdu6f36hW4/D7oyFMcRr0Bmg0M1O7RcZTJvEcf 5yLoReFw1EcZuA6tUqGQRA9pqqciKGOrQqdhgTITg1oVL+xNE0GgRMEHRYn7tOZcOhxzVYnD0NNT 4AraV9SqLooCfkCdHFgROvoYJaJ0pHoWCui9FdINCgNEZcG3zulmp2BW15bXVsxXtRUlBRXqy6uv 1qqvzZqywILTrmf1eOEscjHEwEAfPxbdfSnTTUEoGmZ0ki3guV0Mb0PLY9xmEIY+heXIPW0hOQNF 4cNu1z0vFNTRRVUUhrETTEIGZwiRRw70MI4boa6F0UVOiul2cBgSzLw8AuxnHDW9dwc+YLbbdW0Q mG7QA0oqQIhBXcTB4rjjfh7iAE5J0kJ+4+iC4hqkk4F8+LC1SSBlIXPHL8prUfDIOdVSq6MlR5c2 1QCvzNe1WQ1VOqwuCFvS/nFnY7+1t43V6/+7/htc//36T9d//vRf13/99MdPf0DAp/+8/gcC/3r9 p09/+PRHWf0HtvzFACcAje4FbYeXc+8W0R1jCa7/Atd/Rmp/Ryoa9vtfg4b4n+v/vv5bSb61yZGE wc4tO77hghGA1ClzbQjisjMDUBYc1GEfDy84yQhWavj/t+Dc71BmnPG/+Bjz/T+987c6ev9/zazS +/+15bUn//8YxfUHYRTLt/aSZ1LuMkizjEakDGi7e+IhsgIn9PFkEEdYT/Hx1FaGkOMuuFPBTf59 EJ4FYkxIYmU61KYv3ImEDZ46DpWFwqE6TviIbI9ahh08bh2Vlak2c9w23bE2r3F5XuPKuPHorlNU eu04HOAc3os309Ej7UUheUeaF1lKBSteBpbFqKBhxP4Wntaa8PFKkcmrto1uHAHCm7Y3dvdax+0P 7w72Wy30vPYJtoxWzNhGgFZSFFs4ifawwxPimnQepYZSQLuJ1AtLTrDUAGH4PlavypPvZpTpamHJ Dx2OWIcFTc14H5TLoZp909Hy9kT8gg3qYPSEgqAvHEG+56gelQRVLBpBBRkcOwe3AwE2c0CeAcIR gq8ohdwxsxOxgybdcPjlz54Rnqldm6Wcz2BK0J/goTbBQ0yBbfyATMgBMlwohbdiueWrM7i+DI+p 4npA48zrluEYmcG/ND6tf6HnhR3LA6GpZZAKh1QKpE2GZYtIAZVI3IJRX9qiEot6S7SIeQydh0Cj t4GGEWWPJNYhdTpCuZjKFDZCKDSJykKdeXRaQjzBGrZgBCJGEBpKvBtOIOuHUmRHhybRzWuPgYGE b8UajVo6EgwltA0c6Zhr1B3X5yiHWIYxVcFWqlBiXHqeJkTQmaRkwwSxWoZYbSax2k3EanliE2LF qFYsg7DNBuXHNBVpMgeWFvkSxCEschUW4aaJk/xLgjI7t9lA+gCD0uMtegWU4kUWRclay0EYNWjq ezz44TCxuOGTo6FuLHI82tnWkDMBum1o4UU0pFgqlZLZCYt5EA3ZLGXGDyr8l1BmwQWG8vFYo0uA E9ZyAn6OEi7dU9Orn6np83ROTvtmtbtd0bIUZumapDC526Z6z1zLpC/zICuKGZoZMT88TXWzG4X+ I2inZH2ugt64l29X0buFAgsKGeIei49l8CSWXiPFSlRWyFkpRDYS3hHX9y791EsoE0YFScXEkKEg f1xGihvZDanLslnED/Qo5BFZLk6xJcSGXllTd0IQt152GARM/mawGw4DYdEXHUHDiillQyKhmtgo 4ndp0nrjmRR5kBMw7H6IrkkTfCc7CtvRJMvBBSazlWSTIKsKHfPIMkVJiGLAPusNPSu6IDCvyHXi wEOf0a8ZRcZI6IgcMgkShSQFHSG/sTTEutDo1HfMKH3haVMzy9nwiljORERG4iOpa7JHDwUPKAqP Bck0gUzwl5uExP2i00is4x2mQQxQ9ClGz2/S9wimtAEqRTIDuUezwSptBTqzC+KoQOfIX48Rdzms xueKeYKlUVTcTXgTl5XJNBKFzm6nxAMku4p+u4OSHGdcCoPklzwEHWVdxIQoxUMTEl3H28tPNZuu gdxAOKdCP+QxUhDN1aOMJU+Zd1hn2NPUg+iCeEZbRK8wA8YpjY/m1duPtXG8QiyWIWWrDERamhsv jfbptsm1PPcXpqXX4NmIJ9PDQJHGoR16x3Sooo2ekPj31n57a3dnWWJxNEcyTSsEb+zuHRzvtA5+ t7v//fHB1g+t3Q8HZVg2qglR+Rr2MU1hgl1p/vMr1h7aNuO8O/S8CzFtaYyRYzLaOP0c42UgipL9 RNrE8z9l94Wsc0PmDf/0+JOWfiFv6knXfMsNphRtrK0di7v2hkiEax47ZV4zbdlsvfvwbRnkmM2l Rc3iNh2xS+ZrDrAoselOsyTrPgrP6rESX8LgFPdM16deP+qLvo77cvG7xuIPjcX2Uol+SZyoP91C 0oaWr74b4m0BrY7VBbpo0qq0TMJ2mblj4oF40mIrQv+ELQKllKDW7o66fHfUlTuhJvZxPrcJ0hh9 PsdT6PO5nkKfz/kIPRW0IV5L0kbSnKgvT9RXxvV08lOQ2hRkeQoyppM3amMrvVqlG1QZ2ma0xUxc ecgNuoUxUHF4zPG4GUZobhtT4c/UtidEZ+gPnqsJpZE7kz9CfyPeRMj5uQmCE2YE2wZYVTMy/Smk PTgSaa66nK+ujKojeU4AapOA5UnAmMakmwxc3mcOsiatwr9IrvepPJWn8lSeylN5Kk/lqTyV/wdD 8uEBAFAAAA== --f46d043c06bcb68d180508d3bcbe--

1 0

Re: (ITS#7988) Reflected XSS vulnerability in www.openldap.org
by hyc＠symas.com 26 Nov '14

26 Nov '14

yann.cam(a)gmail.com wrote: > Full_Name: Yann CAM > Version: > OS: > URL: http://www.openldap.org/its/ > Submission from: (NULL) (2a01:e34:edbf:a5d0:845:664b:ce80:cf7b) > > > I'm contacting you to inform you about the presence of a Reflected XSS > vulnerability on the www.openldap.org main domain. Thanks for the report, this is now fixed. > > Through this vulnerability, an attacker could tamper with page rendering, > redirect victims to fake OpenLdap pages, or capture users data. > > This reflected XSS is on GET "id" variable of the current "JitterBug" tracker, > and is not properly sanitized before being used to his page. > > The JitterBug tracker project seems to be suspended > (https://www.samba.org/cgi-bin/jitterbug/), this vulnerability isn't specific to > your bug tracker. I just open a ticket to report this vulnerability to the > samba-jitterbug maintainers (https://bugzilla.samba.org/show_bug.cgi?id=10967). > > Proof of Concept, tested with Firefox 33.1.1 (screenshot in attachment): > > http://www.openldap.org/its/index.cgi/Documentation?id=1337</TITLE><img > src=x onerror="alert(/Reflected XSS - Yann CAM @ASAfety/)" > /><TITLE>;selectid=1337 > > Screenshots available : > > http://www.asafety.fr/data/20141126-RXSS_openldap.org_synetis_001.png > http://www.asafety.fr/data/20141126-RXSS_openldap.org_synetis_002.png > > Feel free to contact me for more information, > > Best regards, > > Yann CAM - Security Consultant @ASafety - Synetis - www.synetis.com > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7988) Reflected XSS vulnerability in www.openldap.org
by yann.cam＠gmail.com 26 Nov '14

26 Nov '14

Full_Name: Yann CAM Version: OS: URL: http://www.openldap.org/its/ Submission from: (NULL) (2a01:e34:edbf:a5d0:845:664b:ce80:cf7b) I'm contacting you to inform you about the presence of a Reflected XSS vulnerability on the www.openldap.org main domain. Through this vulnerability, an attacker could tamper with page rendering, redirect victims to fake OpenLdap pages, or capture users data. This reflected XSS is on GET "id" variable of the current "JitterBug" tracker, and is not properly sanitized before being used to his page. The JitterBug tracker project seems to be suspended (https://www.samba.org/cgi-bin/jitterbug/), this vulnerability isn't specific to your bug tracker. I just open a ticket to report this vulnerability to the samba-jitterbug maintainers (https://bugzilla.samba.org/show_bug.cgi?id=10967). Proof of Concept, tested with Firefox 33.1.1 (screenshot in attachment): http://www.openldap.org/its/index.cgi/Documentation?id=1337</TITLE><img src=x onerror="alert(/Reflected XSS - Yann CAM @ASAfety/)" /><TITLE>;selectid=1337 Screenshots available : http://www.asafety.fr/data/20141126-RXSS_openldap.org_synetis_001.png http://www.asafety.fr/data/20141126-RXSS_openldap.org_synetis_002.png Feel free to contact me for more information, Best regards, Yann CAM - Security Consultant @ASafety - Synetis - www.synetis.com

1 0

Re: (ITS#7987) SIGSEGV in LMDB while adding ldap-entries
by leo＠yuriev.ru 26 Nov '14

26 Nov '14

--e89a8f8389d1c4af560508c7cb28 Content-Type: text/plain; charset=UTF-8 Just run a 'runme.sh' from attached tarball. Problem (coredump) usually is reproduced for 10-20 min. I will try 'git bisect'. Leonid. --e89a8f8389d1c4af560508c7cb28 Content-Type: application/x-gzip; name="its7987-testcase.tar.gz" Content-Disposition: attachment; filename="its7987-testcase.tar.gz" Content-Transfer-Encoding: base64 X-Attachment-Id: f_i2z2cx130 H4sIADIkdlQAA+0723LbyLF+Bb6iF5JWoE2CN1Gy6eUe2xI3q4pWUolyUluKSgUCQxIRLtwZUBLX 0kOS13xMkkpOzkOSb5D/KN0zAAleREmO7c3W4eyKwPT09PT09G1mYC/0Yst3vc6TT1dKWDY3N+hZ 3qqVsk9ZNmuVJ+XKRqVcK5drpfKTUrlUK5eeQOkT8jQqAxHbHOCJP1yMd1/7z7S4YR1cp+G7dl+P 2r9lTrzt20LUIeJdO/R+tGMvCidb4mgK1XUOZFV3nTooSnV4KxjfsWP7iPUj4cURH+o6DTbw3Ibt Bl6YT4dFSB0k6J5xbMeJBmE8psNZ3/ccOz93Ain2YprCC/o+azFnwL14mMxDcpQQ1wc4kUPEvYw4 Qq+GP6rxccyw6/L5Y08Ib+UR0iOSd0jv06x/ELnMcqLwp7T/8sYG2X+1Vq3V8Lm0/89YdFS0C8Z3 d+DV7s4rXQ88ziNOWgHHR2+beoSNvj0EMQydPo8u9PSl4PSYc96PvDCGcqkE5XELZ35kuz1qkTR+ 6jkuy90l8XKf1AXcZ//Vrdoo/le3ttD+y5Wl/X+eIq2WlAA4BlTpAzQyYs9lvPHq9c7OEQLiYZ9h sO1wJnqvQ/eQceGJWNc4i/mwYdTgmQGxF7BoEDfKJThnrG/73gVrGOU6/mfommA2d3ptWyBsKnJi qx3HXDSMp/lnWGl7oRuwuBe5DRWcFcgNG8acmI8dkH2XhbFn+6JB4VkjVnwv8OLGIJRP5iIH3o8z wJ9a+P8FhQ/CgBW8WGy9eL5lid6nGINsfKtWu8P+MdiXkvhPLmCzSvZfq24u7f9zlJUvimhdRbTM nq5/2zxqNlbN/qWb09/s7u/sHjVW3xHwpthjnBWEb/ddfef18euZJheTVX17723ruIktpmA/QBk2 crp+7vm+7ftQ+AFkdwhYIFOHgh24mxsF3wsHV/Dll9iKbgPTCB5AoQNPLbfdxd/4KgYn4kzXYyZi KFyBVYz6LCTbL4howB1WpNjldQecwW907foazK6HnfwoZIBv9WIRf620k4W5+YiCRZhT5IiIhvw4 7kwLQiVpYh99HRwcNvf3dl4fnh01986a+784q5xt5BIm2BVirv7PmO/Vd0qkN0VBEidh2K4LxO+c oZBIOprP7JAIoFQKbtJgZSZdKPTRN3tXjdEICGKh3fZxWYah7fjjOg0xriXJnUCI6wkJQmuIPWeS QCABKUbbbWdqPawplgL7nIHLcB4upNX06YVI1/fvlM3smvpem9vcY4Le/MBtF/HvjLhLaEi6he2H dJ0/qosrkqjyTTIFUj3eycCLT6f7Bueux6HQn+1sBrTdhGvoYojKNmN3MXAjUO2FGOKg3xFw9Pq7 DNaMaDoRhxAFhziJWd28BDfStf2DnaYyvxGXIabrZ6shBuR0AgkSTYDWYMz0qOHC5kV0/tMgsuMs jMUOZNnCSO6CIa6Tsa/HqNfdl+JaKeD1SBOvuwZ8BamnkA5Apprw9dQg2baJ8bwOnMCqeYkqeAlf ffUVGGOBGDkodHH7AacvIe4xFIBGYuPzxKYllDh80YDVMNNF0yjNaRikQ+gsyiVrlVslq1xfNc0y FXiG3XK5oiGREwFQqnS9yuWsVZ50vUqPyRln02v4+oGTxkE6Hv666MH0qQHDSfqj7fvDiSNpXdvd 3z0eOXAvPQPUteJAcBkQKIdCM0cH0Y4EvkWAzqqwalIKhx6Bjd1ZrrAaSjd9h4MrdBYwVvCxkZhB n9WiZcFFrny9cCiKC9n5rHTRwu8am12h6FgMNu+Kh3Nyacie/LGs7O22js9QCZ41zPuklcM0NRo4 vSxHmMjamJZact3p5+UHugGKSRP6HM7oc4j6DClGZQvbU4xS9UUpxTCUS+kgA51o4XzIM5CT8zoq MIEf1XE5R4NDyOLAFudQqdWszB8M+tiVOb0IjKdPnwJlYzHSrBsLlfFefsidjpUCAwG7Ysl6Q6FH ToSEdGPQuu8dbL/eq1FEKG9Wn29AQUAJChuL9aXy9WXEzxfrxpdKJVAd7uUX9SFNgOTyq0pF1+8T Qn+IW6VwPm0pCIWAcZLCnoNIo2y/P9R1JfnGxy7G3Yo7qZyLVG+sFaTZiVJQR7WbhMK3sErUMIPY 29vbSc+xodAev16CYGhXMS0qSQi2ozBmV/F2a18J+pMJQDeTBS29hDQJlvrzMkl1a2P4vJw4h+oj mSuEYPzaRhdDInUi2hLTubJlWQYF90tqwqeaCBSApmV8oOdYoG2OHT/a/2Ofe71usraFURTKulS5 RPpYEZQy1+XEZZ6FqxuFrniYLeiH3x9/e7B/1mpuH+zvtHCfImmgP3gUGczxnIHMINfr6zS/CkL6 tohRTsJ9hpW2k0uYhqRgzjE5+IeukMxiCuIBHnCc4cwxJJCbiEdk3fPyxALrpPnu+to6DqTEycD4 xvMZiCGKJADcKfUHsaCYOinnhfFE0z4Re87IAcyqnsyOpM619l4f7ixQlEIBhyTnfvLq9OZhCoGJ wWKCRZddFMOB7yekKZV4OPkZfZuYQh7SnAhbMpygGiZ6edg82m7uY1ZoKkpT+gpP5TF/EczphmdT Q+WMhCMFnaE7gfwBZJVTZEqhV5Xe4G7qePegjoKbnM3N2iHSXn03wcrNWus3oZHuAzvyfEE6FEwk Z5VOXZAI5bWKFmqeSPMIRx1N/NRnOP9JGfviTzfGPef/lVq1Mr7/K23S/d/mVmV5/vc5ygq82XkD b2znnM5t0kMleXENHXTi+gq0GIOxmpi1nExEXBbbni8A8SZ7RX16CAt7Hvc8IamA6EUD34X9g2No M8DMGSu423HpDAkxBw457ELfjnvo9lVN173Q8Qcu0zRl4zJ3SK2zKDBhCuwiGaCl3h+IL7zwkT18 nzmxd/GoXqEnHoOOPMUR7/bR0WBm94iOo5PMR/Rxh2GXR4NRH73vubRKmpakG+nhUFFSxlad9s8S ZS4Gtep+1J0lgkCFgi/ocHu05kJFqPKmHkeRX0iBGzpqjMs6KAr4DnWyb3PMDGKUiN5W6qlpGO51 0g3KG2RlJbCv6GZHK5e2qlsb5eeVDT0FabXq5vOt0otyRV9h4UXHt7tCu+Qe5iS4M8A/m+6+9Nmm MJINczqpFvC9DubDke0z4TCIooDyeOSeTEjNQNfFoNPxrjTNGF1U8SiK3XAa0r9EiNqjYEhyPY66 FvHhhBRTc3AZEsx8PALsBxw1vXcH0WeO1/EckJhe2AU6hoAIs0AuwBZocT8McAA3p2ghvzEfUiKE dDKQt293dwikr2Tu+GV5IQvuUWdaKjX05FCabYDn5ReVeQ0l2t2uSF/S+n5/+6h5uIfV23/e/g1u /377p9s/v//D7V/f//H97xHw/ne3/0LgX2//9P737/+oqv/Clr9Y4IZg0r2g44r8xLdFdMeYg9u/ wO2fkdrfkYqJ/f5h0RD/d/u/t3/L6fIeUCAJi13ZTnzHBSMAqVPm2hDkZWcGoK+4qMMB7nZwkhw2 Kvj/zyQrmHMo8NHHWBz/6Zu/zeT+D8HVGsb/SmVjaxn/P0fxgn7EY/XVXvJOyp0H5ZbRieQBfXdX vnA7dKMAtxIxx3qKj9u8PEQCreBBBY38l2F0GcoxIcmuaRecfnAnT3hwm3Kir2gnxviESB4PGXnY x/3ZaV6faSuP22Y7VhY1Vhc1bowbTx86Rb3biqM+zuEb2xeMItIhjyg60rzIU+pY8TOwLEYRHSP2 t3F714B3N7o67Wo5GMYRIKNpa/vgsHnWevvm+KjZxMjrnGPLaMWsPQSYOV13ZJBoDdoiIW6q4JGr 6xr6TaSurbvheh2k43tXuslPf5uRp8uI9SByBWKdaKaRiT4olxMj+6Wj7R/K/AUbjP7oDQVBDxxB fedonOYkVSwmQSUZHHsC7oQSXJ4AigwQThF8Q4fO7XJ2Ik7YoDuRIP/BM8JNuOewlPM5TEn6UzxU pniIKbGNPyETaoAMF7r2Si63+nQG15fhxlZeKJiC+Z08nCEz+Evj0/prXT9q2z5ITc2DUjikopE2 WbYjMwVUInlvRn3JRBUW9VZonPkMg4dEo6+BBpyOmxTWCXU6RbmU9RlshFBqwvNSnQW/yCGeZA1b MAORI0gNJd4tN1T1EyWy05My0Z3UHgsTicCOTRo1dyoZSmhbONKZMKk7rs/pBGIexlQlW6lCyXHp fZYQQeeSUg1TxCoZYpW5xCp3EatMEpsSK2a1chmkb7boQM00kCZzYX1NrEMcwZowYA3umjjJPycp syuH9VUMsOg8vUmfgFK+yDhP1loNwqjBNL7BjR8OE8s7QTUa6saawK2dYw8Ek6D7hpZRxESKuVwu mZ30mMd8wOYpM/6hwn8MZZZcYCofjzU6Bzhhc0LAX6CEc4/U9NIHavoinVPTvlvt7le0LIV5uqYo TFvbTO+5a5n0ZT5kRTFHMzkLootUNzs8Cj6DdirWFyronbZ8v4o+LBVY0ckRd1l8ppInufQmKVai slLOusYdJLwvL/xxS8GVMmFWkFTKmDJolz06SiHF5U5d6bJqlvkDvUp5cNvDKTal2DAqm8Z+BPKa zInCkE4y6GgnGoTSo6+5koYd05ENiYRq0lCI8jPlvXFPijyoCVhOL8LQZEq+E4vCdnTJanCJyRw9 MRJkVadtHnkmnqQoFhyx7sC3+ZDAoqjWSYCIAgZ9lakoHVFDJkmilKSkI+U3loZcFxqd+o4ZpQfu Ns1yPpteEcuZjMhKYiR1TWz0RPKAovBZmEwTyAV/vEko3I86jcQ7PmAaxABln3L0SSP9BsF0bIBK kcxA2Wg2WSVToD27JI4KdIX8dRlxN4FV/1AxT7E0yoo7CW/ydjOZRqLQWXNKIkBiVfRvd1CS4xMX rZ/8Sx6Cjk5d5IToiIcmJLuOzStINZvujbxQBietF4kYKcjm0mnGk6fMu6w96JrGMR8Sz+iL6BNm wDyl/q588+pdZZyvEIt5SNnKA5FW7sZPs326nvJs3/uRmem9eTbjyfSwUKRx5ET+GW2qyNATEr9q HrV2D/arCkugO1LHtFLw1sHh8dl+8/jXB0e/PDve/a558PY4D1WrlBBVn2Gf0RSm2FXuf3LFWgPH YUJ0Br4/lNNWzhg5JqeN059gPA9EUbGfSJt4/o/8vpT1xJCTjn92/GlPvzLp6knXAtsLZxRtrK1t W3jOtjwIN312wfxG2rLTfPP2F3lQYzbW10xbOLTFzpVfCIA1hU2XoDlVD1B4dpflxDomp2gznYB6 fV9YCwpol2vf1te+q6+11pHPkfrTtSUZtPr03ZKfF5g1rK7QPbpZomWSvqs8sU08lm9mbHOMT9gi UXIJauXhqNWHo248CDXxj4u5TZDG6Is5nkFfzPUM+mLOR+ipoC35IZM5kuZUvTpV3xjX08nPQCoz kOoMZExn0qmNvfRmCZ5CtSQddEZbykkoj4RFtzAWKo6IBW43I47utj6T/syYPSG6g6D/hZFQGoUz rY2yOn8pP12YiHNTBKfcCLb1sWpkZPrbiGxwJNKJanWyujGqjuQ5BahMA6rTgDGN6TAZeqLHXGRN eYWfyVnvsizLsizLsizLsizLsizLsizLsizLsizLsvz/K/8GiErmgABQAAA= --e89a8f8389d1c4af560508c7cb28--

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs