Full_Name: Jan Vcelak Version: 2.4.33 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (209.132.186.34)
Hello,
it is possible to crash slapd in certain configuration with rwm overlay enabled, using specific ldapmodify. This problem seems to be present for a very long time.
Configuration used (slapd.ldif):
dn: cn=config objectClass: olcGlobal cn: config olcArgsFile: /var/run/openldap/slapd.args olcPidFile: /var/run/openldap/slapd.pid
dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulepath: /usr/lib64/openldap olcModuleload: rwm.la
dn: cn=schema,cn=config objectClass: olcSchemaConfig cn: schema
include: file:///etc/openldap/schema/core.ldif include: file:///etc/openldap/schema/cosine.ldif include: file:///etc/openldap/schema/inetorgperson.ldif
dn: olcDatabase=frontend,cn=config objectClass: olcDatabaseConfig olcDatabase: frontend
dn: olcDatabase=hdb,cn=config objectClass: olcDatabaseConfig objectClass: olcHdbConfig olcDatabase: hdb olcSuffix: dc=my-domain,dc=com olcRootDN: cn=Manager,dc=my-domain,dc=com olcRootPW: secret olcDbDirectory: /var/lib/ldap olcDbIndex: objectClass eq,pres olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub
dn: olcOverlay=rwm,olcDatabase={1}hdb,cn=config objectClass: olcOverlayConfig objectClass: olcRwmConfig olcOverlay: rwm olcRwmRewrite: {0}rwm-rewriteEngine "on" olcRwmRewrite: {1}rwm-rewriteContext "bindDN" olcRwmRewrite: {2}rwm-rewriteRule "cn=([a-z]+),ou=People,dc=my-domain,dc=com" "uid=$1,ou=People,dc=my-domain,dc=com"
Set up and start the server. Add the initial data:
dn: dc=my-domain,dc=com objectClass: dcObject objectClass: organizationalUnit description: Root LDAP entry dc: my-domain ou: rootobject
dn: cn=Manager,dc=my-domain,dc=com objectClass: organizationalRole cn: Manager
dn: ou=People,dc=my-domain,dc=com objectClass: top objectClass: organizationalunit ou: People
dn: cn=test1,ou=People,dc=my-domain,dc=com objectClass: inetOrgPerson cn: test1 sn: test
Perform following modify operation:
dn: cn=test1,ou=People,dc=my-domain,dc=com changetype: modrdn newrdn: cn=test2 deleteoldrdn: 1 newsuperior: ou=People,dc=my-domain,dc=com
The slapd daemon will crash, here is the full backtrace:
#0 rwm_op_rollback (op=op@entry=0x7fffe8000930, ros=0x7fffe8001738, rs=<optimized out>) at rwm.c:110 No locals. #1 0x00007ffff210f1c2 in rwm_op_cleanup (op=0x7fffe8000930, rs=<optimized out>) at rwm.c:165 cb = 0x7fffe8001718 ros = <optimized out> #2 0x00005555555a606b in slap_cleanup_play (op=op@entry=0x7fffe8000930, rs=rs@entry=0x7ffff1106930) at result.c:541 sc_next = 0x7ffff11065c0 sc_nextp = 0x7fffe8001718 sc = 0x7fffe8001718 scp = 0x7ffff1106018 #3 0x00005555555a6573 in send_ldap_response (op=op@entry=0x7fffe8000930, rs=rs@entry=0x7ffff1106930) at result.c:733 berbuf = { buffer = "\000\000\001\000\001\000\000\000\377\377\377\377\377\377\377\377", '\000' <repeats 24 times>, "F\030\000\350\377\177\000\000\024(\000\350\377\177\000\000\000\000\000\000\000\000\000\000F\030\000\350\377\177\000\000\320\016\000\350\377\177\000\000P\373\275UUU\000\000\200v\357\367\377\177\000\000\001\000\000\000hw\001", '\000' <repeats 17 times>"\266, \252r\367\377\177", '\000' <repeats 11 times>, "a\370<\316m]\037\200*\227\367\377\177\000\000\001\000\000\000UU\000\000\321\323vP\000\000\000\000\350\n\000\350\377\177\000\000\003", '\000' <repeats 23 times>"\225, \362\227\367\311\362\245\303\000\000\000\000\000\000\000\000+\246fUUU\000\000\030ӿUUU\000\000\223\204+\366\377\177\000\000\060\065\020\350\377\177\000\000\000a\370<\316m]\037", ialign = 65536, lalign = 4295032832, falign = 9.18354962e-41, dalign = 2.1220281700514382e-314, palign = 0x100010000 <Address 0x100010000 out of bounds>} ber = <optimized out> rc = 32768 bytes = <optimized out> __PRETTY_FUNCTION__ = "send_ldap_response" #4 0x00005555555a7126 in slap_send_ldap_result (op=0x7fffe8000930, rs=0x7ffff1106930) at result.c:860 tmp = 0x0 otext = 0x0 oref = 0x0 __PRETTY_FUNCTION__ = "slap_send_ldap_result" #5 0x0000555555621a50 in hdb_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:789 bdb = 0x5555559fa4f0 children = 0x55555599d260 entry = 0x55555599cfc0 p_dn = {bv_len = 29, bv_val = 0x7fffe8102399 "ou=People,dc=my-domain,dc=com"} p_ndn = {bv_len = 29, bv_val = 0x7fffe81023c9 ""} new_dn = {bv_len = 38, bv_val = 0x0} new_ndn = {bv_len = 38, bv_val = 0x0} e = <optimized out> p = <optimized out> ei = 0x7fffe8103f00 eip = 0x7fffe410a0a0 nei = 0x7fffe410a0a0 neip = 0x0 textbuf = "0\t\000\350\377\177\000\000\000e\020\361\377\177\000\000 i\237UUU\000\000\230\060\021\362\377\177\000\000\200\241^\366\377\177\000\000\000\000\000\000\316m]\037&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000\060\t\000\350\377\177\000\000\070\027\000\350\377\177\000\000\000\000\000\000\000\000\000\000)\323\020\362\377\177\000\000&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000&\000\000\000\000\000\000\000\270\022\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000\000\314X\021\362\377\177\000\000\060i\020\361\377\177\000\000\030\027\000\350\377\177\000\000\030\027\000\350\377\177\000\000\060i\020\361\377\177\000\000\332\326\020\362\377\177\000\000\360d\020\361\377\177\000\000\020e\020\361\377\177\000\000\b\000\000\000\000\000\000\000\270\023\000\350\377\177\000\000\b\000\000\000\000\000\000\000\350\023\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000" ltid = 0x0 lt2 = 0x7fffe81068f0 opinfo = {boi_oe = {oe_next = {sle_next = 0x0}, oe_key = 0x0}, boi_txn = 0x7fffe8106730, boi_locks = 0x0, boi_err = 0, boi_acl_cache = 0 '\000', boi_flag = 0 '\000'} dummy = {e_id = 4, e_name = {bv_len = 38, bv_val = 0x7fffe8106890 "cn=test2,ou=People,dc=my-domain,dc=com"}, e_nname = { bv_len = 38, bv_val = 0x7fffe81068c0 "cn=test2,ou=people,dc=my-domain,dc=com"}, e_attrs = 0x0, e_ocflags = 256, e_bv = { bv_len = 0, bv_val = 0x0}, e_private = 0x7fffe8103f00} np = <optimized out> np_dn = <optimized out> np_ndn = <optimized out> new_parent_dn = <optimized out> manageDSAit = 0 lock = {off = 164424, ndx = 98, gen = 2, mode = DB_LOCK_WRITE} plock = {off = 157848, ndx = 932, gen = 2, mode = DB_LOCK_READ} nplock = {off = 0, ndx = 1436511616, gen = 21845, mode = 4044383224} num_retries = 0 preread_ctrl = 0x0 postread_ctrl = 0x0 ctrls = {0x0, 0x555555a2ea00, 0x0, 0x7ffff11064a0, 0x7ffff1106480, 0x7ffff1106450} num_ctrls = 0 rc = <optimized out> parent_is_glue = 0 parent_is_leaf = 1 __PRETTY_FUNCTION__ = "hdb_modrdn" #6 0x0000555555603c96 in overlay_op_walk (op=op@entry=0x7fffe8000930, rs=0x7ffff1106930, which=op_modrdn, oi=0x5555559f76b0, on=0x0) at backover.c:671 func = <optimized out> rc = 32768 #7 0x0000555555603deb in over_op_func (op=0x7fffe8000930, rs=<optimized out>, which=<optimized out>) at backover.c:723 oi = <optimized out> on = <optimized out> be = 0x5555559fa350 db = {bd_info = 0x5555558e3620, bd_self = 0x5555559fa350, be_ctrls = "\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001", '\000' <repeats 17 times>, "\001", be_flags = 2312, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x555555a1df40, be_nsuffix = 0x555555a1df70, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = { bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 30, bv_val = 0x555555a1e010 "cn=Manager,dc=my-domain,dc=com"}, be_rootndn = {bv_len = 30, bv_val = 0x555555a1e060 "cn=manager,dc=my-domain,dc=com"}, be_rootpw = {bv_len = 6, bv_val = 0x555555a1dee0 "secret"}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x0, be_acl = 0x0, be_dfltaccess = ACL_READ, be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0x555555bdbd80, be_pcl_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0x5555558e7ec0, be_private = 0x5555559fa4f0, be_next = { stqe_next = 0x0}} cb = {sc_next = 0x0, sc_response = 0x555555602ff0 <over_back_response>, sc_cleanup = 0, sc_private = 0x5555559f76b0} sc = <optimized out> rc = 32768 __PRETTY_FUNCTION__ = "over_op_func" #8 0x00005555555b0f9c in fe_op_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:314 repl_user = <optimized out> dest_ndn = {bv_len = 38, bv_val = 0x7fffe80016e8 "cn=test2,ou=people,dc=my-domain,dc=com"} dest_pndn = {bv_len = 29, bv_val = 0x7fffe80016c0 "ou=people,dc=my-domain,dc=com"} pdn = {bv_len = 0, bv_val = 0x0} op_be = 0x5555559fa350 bd = 0x5555558ea2c0 diff = <optimized out> #9 0x00005555555b207e in do_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:186 dn = {bv_len = 38, bv_val = 0x7fffe81065c7 "cn=test1,ou=People,dc=my-domain,dc=com"} newrdn = {bv_len = 8, bv_val = 0x7fffe81065ef "cn=test2"} newSuperior = {bv_len = 29, bv_val = 0x7fffe81065fc "ou=People,dc=my-domain,dc=com"} deloldrdn = -1 pnewSuperior = {bv_len = 29, bv_val = 0x7fffe8001658 "ou=People,dc=my-domain,dc=com"} nnewSuperior = {bv_len = 29, bv_val = 0x7fffe80016c0 "ou=people,dc=my-domain,dc=com"} length = 29 #10 0x0000555555595d21 in connection_operation (ctx=ctx@entry=0x7ffff1106b60, arg_v=arg_v@entry=0x7fffe8000930) at connection.c:1150 rc = 80 cancel = <optimized out> op = 0x7fffe8000930 rs = {sr_type = REP_RESULT, sr_tag = 109, sr_msgid = 2, sr_err = 0, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, sr_flags = 0} tag = 108 opidx = SLAP_OP_MODRDN conn = 0x555555a2ea00 memctx = 0x7fffe8000ed0 memctx_null = 0x0 memsiz = 1048576 __PRETTY_FUNCTION__ = "connection_operation" #11 0x0000555555596079 in connection_read_thread (ctx=0x7ffff1106b60, argv=<optimized out>) at connection.c:1286 rc = <optimized out> cri = {op = 0x7fffe8000930, func = 0, arg = 0x0, ctx = <optimized out>, nullop = <optimized out>} s = <optimized out> #12 0x00007ffff7b997f3 in ldap_int_thread_pool_wrapper (xpool=0x5555559a1b60) at tpool.c:688 pool = 0x5555559a1b60 task = 0x7fffec0008c0 work_list = <optimized out> ctx = {ltu_id = 140737237776128, ltu_key = {{ltk_key = 0x555555593ee0, ltk_data = 0x7fffe8000dc0, ltk_free = 0x555555593fb0 <conn_counter_destroy>}, {ltk_key = 0x5555555edcc0, ltk_data = 0x7fffe8000ed0, ltk_free = 0x5555555edce0 <slap_sl_mem_destroy>}, {ltk_key = 0x555555bdae00, ltk_data = 0x7fffe81010f0, ltk_free = 0x555555648bb0 <bdb_reader_free>}, {ltk_key = 0x5555555aa480, ltk_data = 0x0, ltk_free = 0x5555555aa3e0 <slap_op_q_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>}} kctx = <optimized out> keyslot = <optimized out> hash = <optimized out> __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper" #13 0x00007ffff6e61d14 in start_thread (arg=0x7ffff1107700) at pthread_create.c:309 __res = <optimized out> pd = 0x7ffff1107700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737237776128, 5431369951291209288, 1, 140737354125312, 140737237776128, 23, -5431349871756872120, -5431349957038737848}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = { prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = 0 pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #14 0x00007ffff632a67d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 No locals. No symbol "bt" in current context. #0 rwm_op_rollback (op=op@entry=0x7fffe8000930, ros=0x7fffe8001738, rs=<optimized out>) at rwm.c:110 No locals. #1 0x00007ffff210f1c2 in rwm_op_cleanup (op=0x7fffe8000930, rs=<optimized out>) at rwm.c:165 cb = 0x7fffe8001718 ros = <optimized out> #2 0x00005555555a606b in slap_cleanup_play (op=op@entry=0x7fffe8000930, rs=rs@entry=0x7ffff1106930) at result.c:541 sc_next = 0x7ffff11065c0 sc_nextp = 0x7fffe8001718 sc = 0x7fffe8001718 scp = 0x7ffff1106018 #3 0x00005555555a6573 in send_ldap_response (op=op@entry=0x7fffe8000930, rs=rs@entry=0x7ffff1106930) at result.c:733 berbuf = {buffer = "\000\000\001\000\001\000\000\000\377\377\377\377\377\377\377\377", '\000' <repeats 24 times>, "F\030\000\350\377\177\000\000\024(\000\350\377\177\000\000\000\000\000\000\000\000\000\000F\030\000\350\377\177\000\000\320\016\000\350\377\177\000\000P\373\275UUU\000\000\200v\357\367\377\177\000\000\001\000\000\000hw\001", '\000' <repeats 17 times>"\266, \252r\367\377\177", '\000' <repeats 11 times>, "a\370<\316m]\037\200*\227\367\377\177\000\000\001\000\000\000UU\000\000\321\323vP\000\000\000\000\350\n\000\350\377\177\000\000\003", '\000' <repeats 23 times>"\225, \362\227\367\311\362\245\303\000\000\000\000\000\000\000\000+\246fUUU\000\000\030ӿUUU\000\000\223\204+\366\377\177\000\000\060\065\020\350\377\177\000\000\000a\370<\316m]\037", ialign = 65536, lalign = 4295032832, falign = 9.18354962e-41, dalign = 2.1220281700514382e-314, palign = 0x100010000 <Address 0x100010000 out of bounds>} ber = <optimized out> rc = 32768 bytes = <optimized out> __PRETTY_FUNCTION__ = "send_ldap_response" #4 0x00005555555a7126 in slap_send_ldap_result (op=0x7fffe8000930, rs=0x7ffff1106930) at result.c:860 tmp = 0x0 otext = 0x0 oref = 0x0 __PRETTY_FUNCTION__ = "slap_send_ldap_result" #5 0x0000555555621a50 in hdb_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:789 bdb = 0x5555559fa4f0 children = 0x55555599d260 entry = 0x55555599cfc0 p_dn = {bv_len = 29, bv_val = 0x7fffe8102399 "ou=People,dc=my-domain,dc=com"} p_ndn = {bv_len = 29, bv_val = 0x7fffe81023c9 ""} new_dn = {bv_len = 38, bv_val = 0x0} new_ndn = {bv_len = 38, bv_val = 0x0} e = <optimized out> p = <optimized out> ei = 0x7fffe8103f00 eip = 0x7fffe410a0a0 nei = 0x7fffe410a0a0 neip = 0x0 textbuf = "0\t\000\350\377\177\000\000\000e\020\361\377\177\000\000 i\237UUU\000\000\230\060\021\362\377\177\000\000\200\241^\366\377\177\000\000\000\000\000\000\316m]\037&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000\060\t\000\350\377\177\000\000\070\027\000\350\377\177\000\000\000\000\000\000\000\000\000\000)\323\020\362\377\177\000\000&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000&\000\000\000\000\000\000\000\270\022\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000\000\314X\021\362\377\177\000\000\060i\020\361\377\177\000\000\030\027\000\350\377\177\000\000\030\027\000\350\377\177\000\000\060i\020\361\377\177\000\000\332\326\020\362\377\177\000\000\360d\020\361\377\177\000\000\020e\020\361\377\177\000\000\b\000\000\000\000\000\000\000\270\023\000\350\377\177\000\000\b\000\000\000\000\000\000\000\350\023\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000" ltid = 0x0 lt2 = 0x7fffe81068f0 opinfo = {boi_oe = {oe_next = {sle_next = 0x0}, oe_key = 0x0}, boi_txn = 0x7fffe8106730, boi_locks = 0x0, boi_err = 0, boi_acl_cache = 0 '\000', boi_flag = 0 '\000'} dummy = {e_id = 4, e_name = {bv_len = 38, bv_val = 0x7fffe8106890 "cn=test2,ou=People,dc=my-domain,dc=com"}, e_nname = {bv_len = 38, bv_val = 0x7fffe81068c0 "cn=test2,ou=people,dc=my-domain,dc=com"}, e_attrs = 0x0, e_ocflags = 256, e_bv = {bv_len = 0, bv_val = 0x0}, e_private = 0x7fffe8103f00} np = <optimized out> np_dn = <optimized out> np_ndn = <optimized out> new_parent_dn = <optimized out> manageDSAit = 0 lock = {off = 164424, ndx = 98, gen = 2, mode = DB_LOCK_WRITE} plock = {off = 157848, ndx = 932, gen = 2, mode = DB_LOCK_READ} nplock = {off = 0, ndx = 1436511616, gen = 21845, mode = 4044383224} num_retries = 0 preread_ctrl = 0x0 postread_ctrl = 0x0 ctrls = {0x0, 0x555555a2ea00, 0x0, 0x7ffff11064a0, 0x7ffff1106480, 0x7ffff1106450} num_ctrls = 0 rc = <optimized out> parent_is_glue = 0 parent_is_leaf = 1 __PRETTY_FUNCTION__ = "hdb_modrdn" #6 0x0000555555603c96 in overlay_op_walk (op=op@entry=0x7fffe8000930, rs=0x7ffff1106930, which=op_modrdn, oi=0x5555559f76b0, on=0x0) at backover.c:671 func = <optimized out> rc = 32768 #7 0x0000555555603deb in over_op_func (op=0x7fffe8000930, rs=<optimized out>, which=<optimized out>) at backover.c:723 oi = <optimized out> on = <optimized out> be = 0x5555559fa350 db = {bd_info = 0x5555558e3620, bd_self = 0x5555559fa350, be_ctrls = "\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001", '\000' <repeats 17 times>, "\001", be_flags = 2312, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x555555a1df40, be_nsuffix = 0x555555a1df70, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 30, bv_val = 0x555555a1e010 "cn=Manager,dc=my-domain,dc=com"}, be_rootndn = {bv_len = 30, bv_val = 0x555555a1e060 "cn=manager,dc=my-domain,dc=com"}, be_rootpw = {bv_len = 6, bv_val = 0x555555a1dee0 "secret"}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x0, be_acl = 0x0, be_dfltaccess = ACL_READ, be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0x555555bdbd80, be_pcl_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0x5555558e7ec0, be_private = 0x5555559fa4f0, be_next = {stqe_next = 0x0}} cb = {sc_next = 0x0, sc_response = 0x555555602ff0 <over_back_response>, sc_cleanup = 0, sc_private = 0x5555559f76b0} sc = <optimized out> rc = 32768 __PRETTY_FUNCTION__ = "over_op_func" #8 0x00005555555b0f9c in fe_op_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:314 repl_user = <optimized out> dest_ndn = {bv_len = 38, bv_val = 0x7fffe80016e8 "cn=test2,ou=people,dc=my-domain,dc=com"} dest_pndn = {bv_len = 29, bv_val = 0x7fffe80016c0 "ou=people,dc=my-domain,dc=com"} pdn = {bv_len = 0, bv_val = 0x0} op_be = 0x5555559fa350 bd = 0x5555558ea2c0 diff = <optimized out> #9 0x00005555555b207e in do_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:186 dn = {bv_len = 38, bv_val = 0x7fffe81065c7 "cn=test1,ou=People,dc=my-domain,dc=com"} newrdn = {bv_len = 8, bv_val = 0x7fffe81065ef "cn=test2"} newSuperior = {bv_len = 29, bv_val = 0x7fffe81065fc "ou=People,dc=my-domain,dc=com"} deloldrdn = -1 pnewSuperior = {bv_len = 29, bv_val = 0x7fffe8001658 "ou=People,dc=my-domain,dc=com"} nnewSuperior = {bv_len = 29, bv_val = 0x7fffe80016c0 "ou=people,dc=my-domain,dc=com"} length = 29 #10 0x0000555555595d21 in connection_operation (ctx=ctx@entry=0x7ffff1106b60, arg_v=arg_v@entry=0x7fffe8000930) at connection.c:1150 rc = 80 cancel = <optimized out> op = 0x7fffe8000930 rs = {sr_type = REP_RESULT, sr_tag = 109, sr_msgid = 2, sr_err = 0, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, sr_flags = 0} tag = 108 opidx = SLAP_OP_MODRDN conn = 0x555555a2ea00 memctx = 0x7fffe8000ed0 memctx_null = 0x0 memsiz = 1048576 __PRETTY_FUNCTION__ = "connection_operation" #11 0x0000555555596079 in connection_read_thread (ctx=0x7ffff1106b60, argv=<optimized out>) at connection.c:1286 rc = <optimized out> cri = {op = 0x7fffe8000930, func = 0, arg = 0x0, ctx = <optimized out>, nullop = <optimized out>} s = <optimized out> #12 0x00007ffff7b997f3 in ldap_int_thread_pool_wrapper (xpool=0x5555559a1b60) at tpool.c:688 pool = 0x5555559a1b60 task = 0x7fffec0008c0 work_list = <optimized out> ctx = {ltu_id = 140737237776128, ltu_key = {{ltk_key = 0x555555593ee0, ltk_data = 0x7fffe8000dc0, ltk_free = 0x555555593fb0 <conn_counter_destroy>}, {ltk_key = 0x5555555edcc0, ltk_data = 0x7fffe8000ed0, ltk_free = 0x5555555edce0 <slap_sl_mem_destroy>}, {ltk_key = 0x555555bdae00, ltk_data = 0x7fffe81010f0, ltk_free = 0x555555648bb0 <bdb_reader_free>}, {ltk_key = 0x5555555aa480, ltk_data = 0x0, ltk_free = 0x5555555aa3e0 <slap_op_q_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>}} kctx = <optimized out> keyslot = <optimized out> hash = <optimized out> __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper" #13 0x00007ffff6e61d14 in start_thread (arg=0x7ffff1107700) at pthread_create.c:309 __res = <optimized out> pd = 0x7ffff1107700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737237776128, 5431369951291209288, 1, 140737354125312, 140737237776128, 23, -5431349871756872120, -5431349957038737848}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = 0 pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #14 0x00007ffff632a67d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 No locals. #0 0x00000000005a39de in rwm_op_rollback (op=0x7fffe4002960, rs=0x7ffff23e5a50, ros=0x7fffe4003558) at ../../../../servers/slapd/overlays/rwm.c:111 __PRETTY_FUNCTION__ = "rwm_op_rollback" #1 0x00000000005a3c79 in rwm_op_cleanup (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../../servers/slapd/overlays/rwm.c:167 cb = 0x7fffe4003538 ros = 0x7fffe4003558 #2 0x00000000004670e8 in slap_cleanup_play (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/result.c:541 sc_next = 0x7ffff23e5690 sc_nextp = 0x7fffe4003538 sc = 0x7fffe4003538 scp = 0x7ffff23e5080 #3 0x0000000000467b16 in send_ldap_response (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/result.c:733 berbuf = {buffer = "\000\000\001\000\001\000\000\000\377\377\377\377\377\377\377\377", '\000' <repeats 24 times>, "f6\000\344\377\177\000\000\064F\000\344\377\177\000\000\000\000\000\000\000\000\000\000f6\000\344\377\177\000\000\200'\000\344\377\177\000\000\017\326vP\000\000\000\000\000\017ƾ\032\372\235\264\000\000\000\000\000\000\000\000ĥ`", '\000' <repeats 13 times>, "\030+\000\344\377\177\000\000\003", '\000' <repeats 15 times>"\356, &\\000\000\000\000\000иV\000\000\000\000\000 \314\020\344\377\177\000\000\000\017ƾ\032\372\235\264@R>\362\377\177\000\000H\314\020\344\377\177\000\000\a\000\000\000\000\000\000\000\361\264d\000\000\000\000\000\004\000\000\000\000\000\000\000P0\000\344\377\177", '\000' <repeats 18 times>, "PR>\362\377\177\000\000Pp\275\000\000\000\000", ialign = 65536, lalign = 4295032832, falign = 9.18354962e-41, dalign = 2.1220281700514382e-314, palign = 0x100010000 <Address 0x100010000 out of bounds>} ber = 0x7ffff23e50f0 rc = 32768 bytes = 14 __PRETTY_FUNCTION__ = "send_ldap_response" #4 0x0000000000468318 in slap_send_ldap_result (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/result.c:860 tmp = 0x0 otext = 0x0 oref = 0x0 __PRETTY_FUNCTION__ = "slap_send_ldap_result" #5 0x000000000051e4a9 in hdb_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at modrdn.c:789 bdb = 0x9ebd80 children = 0x9928d0 entry = 0x992630 p_dn = {bv_len = 29, bv_val = 0x7fffe410b7f9 "ou=People,dc=my-domain,dc=com"} p_ndn = {bv_len = 29, bv_val = 0x7fffe410b829 ""} new_dn = {bv_len = 38, bv_val = 0x0} new_ndn = {bv_len = 38, bv_val = 0x0} e = 0xbf3c78 p = 0x0 ei = 0x7fffe410cc20 eip = 0x7fffe410b970 nei = 0x7fffe410b970 neip = 0x0 textbuf = "X5\000\344\377\177\000\000%\231e\000\000\000\000\000PZ>\362\377\177\000\000`)\000\344\377\177\000\000\220U>\362\377\177\000\000\000\000\000\000\000\000\000\000\320{\236\000\000\000\000\000\260}\236\000\000\000\000\000&\000\000\000\000\000\000\000P0\000\344\377\177\000\000&\000\000\000\000\000\000\000\330\060\000\344\377\177\000\000\260}\236\000\000\000\000\000\200(\242\000\000\000\000\000%\231e\000\000\000\000\000PZ>\362\377\177\000\000\320U>\362\377\177\000\000BXZ\000\000\000\000\000PZ>\362\377\177\000\000`)\000\344\377\177\000\000PZ>\362\000\200\000\000\320{\236\000\000\000\000\000\260}\236\000\000\000\000\000\070\065\000\344\377\177\000\000\035\000\000\000\000\000\000\000\340\064\000\344\377\177\000\000\035\000\000\000\000\000\000\000x4\000\344\377\177\000\000\b\000\000\000\000\000\000\000\330\061\000\344\377\177\000\000\b\000\000\000\000\000\000\000\b"... textlen = 256 ltid = 0x0 lt2 = 0x7fffe410d8d0 opinfo = {boi_oe = {oe_next = {sle_next = 0x0}, oe_key = 0x0}, boi_txn = 0x7fffe40024f0, boi_locks = 0x0, boi_err = 0, boi_acl_cache = 0 '\000', boi_flag = 0 '\000'} dummy = {e_id = 4, e_name = {bv_len = 38, bv_val = 0x7fffe4002650 "cn=test2,ou=People,dc=my-domain,dc=com"}, e_nname = {bv_len = 38, bv_val = 0x7fffe4002680 "cn=test2,ou=people,dc=my-domain,dc=com"}, e_attrs = 0x0, e_ocflags = 256, e_bv = {bv_len = 0, bv_val = 0x0}, e_private = 0x7fffe410cc20} np = 0x0 np_dn = 0x0 np_ndn = 0x7ffff23e5360 new_parent_dn = 0x7ffff23e5350 manageDSAit = 0 lock = {off = 164424, ndx = 98, gen = 2, mode = DB_LOCK_WRITE} plock = {off = 157848, ndx = 932, gen = 2, mode = DB_LOCK_READ} nplock = {off = 0, ndx = 0, gen = 0, mode = DB_LOCK_NG} num_retries = 0 preread_ctrl = 0x0 postread_ctrl = 0x0 ctrls = {0x0, 0x7fffe4003050, 0xa22880, 0x0, 0x7ffff23e54a0, 0x5abe87} num_ctrls = 0 rc = 0 parent_is_glue = 0 parent_is_leaf = 1 settle = 0 __PRETTY_FUNCTION__ = "hdb_modrdn" #6 0x00000000004ebf0c in overlay_op_walk (op=0x7fffe4002960, rs=0x7ffff23e5a50, which=op_modrdn, oi=0x9e0c10, on=0x0) at ../../../servers/slapd/backover.c:671 func = 0x8bd198 rc = 32768 #7 0x00000000004ec141 in over_op_func (op=0x7fffe4002960, rs=0x7ffff23e5a50, which=op_modrdn) at ../../../servers/slapd/backover.c:723 oi = 0x9e0c10 on = 0x9e7bd0 be = 0x9ebbe0 db = {bd_info = 0x8bd140, bd_self = 0x9ebbe0, be_ctrls = "\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001\001", '\000' <repeats 16 times>, "\001", be_flags = 264, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x9d2740, be_nsuffix = 0x9ebbb0, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 30, bv_val = 0x9ec140 "cn=Manager,dc=my-domain,dc=com"}, be_rootndn = {bv_len = 30, bv_val = 0x9ec190 "cn=manager,dc=my-domain,dc=com"}, be_rootpw = {bv_len = 6, bv_val = 0x9ec440 "secret"}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x0, be_acl = 0x0, be_dfltaccess = ACL_READ, be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0xbd7030, be_pcl_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0x8c3400, be_private = 0x9ebd80, be_next = {stqe_next = 0x0}} cb = {sc_next = 0x0, sc_response = 0x4eacb0 <over_back_response>, sc_cleanup = 0, sc_private = 0x9e0c10} sc = 0x0 rc = 32768 __PRETTY_FUNCTION__ = "over_op_func" #8 0x00000000004ec2d8 in over_op_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/backover.c:768 No locals. #9 0x00000000004765fa in fe_op_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/modrdn.c:314 repl_user = 0 dest_ndn = {bv_len = 38, bv_val = 0x7fffe4003508 "cn=test2,ou=people,dc=my-domain,dc=com"} dest_pndn = {bv_len = 29, bv_val = 0x7fffe40034e0 "ou=people,dc=my-domain,dc=com"} pdn = {bv_len = 0, bv_val = 0x0} op_be = 0x9ebbe0 bd = 0x8c7620 diff = 0 #10 0x0000000000475d88 in do_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/modrdn.c:186 dn = {bv_len = 38, bv_val = 0x7fffe410cb37 "cn=test1,ou=People,dc=my-domain,dc=com"} newrdn = {bv_len = 8, bv_val = 0x7fffe410cb5f "cn=test2"} newSuperior = {bv_len = 29, bv_val = 0x7fffe410cb6c "ou=People,dc=my-domain,dc=com"} deloldrdn = -1 pnewSuperior = {bv_len = 29, bv_val = 0x7fffe4003478 "ou=People,dc=my-domain,dc=com"} nnewSuperior = {bv_len = 29, bv_val = 0x7fffe40034e0 "ou=people,dc=my-domain,dc=com"} length = 29 #11 0x000000000044fc27 in connection_operation (ctx=0x7ffff23e5b90, arg_v=0x7fffe4002960) at ../../../servers/slapd/connection.c:1150 rc = 80 cancel = 0 op = 0x7fffe4002960 rs = {sr_type = REP_RESULT, sr_tag = 109, sr_msgid = 2, sr_err = 0, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, sr_flags = 0} tag = 108 opidx = SLAP_OP_MODRDN conn = 0xa22880 memctx = 0x7fffe4002780 memctx_null = 0x0 memsiz = 1048576 __PRETTY_FUNCTION__ = "connection_operation" #12 0x0000000000450254 in connection_read_thread (ctx=0x7ffff23e5b90, argv=0x17) at ../../../servers/slapd/connection.c:1286 rc = 0 cri = {op = 0x7fffe4002960, func = 0, arg = 0x0, ctx = 0x7ffff23e5b90, nullop = 0} s = 23 #13 0x00000000005c78ad in ldap_int_thread_pool_wrapper (xpool=0x9973b0) at ../../../libraries/libldap_r/tpool.c:688 pool = 0x9973b0 task = 0x7fffec000a20 work_list = 0x997448 ctx = {ltu_id = 140737257563904, ltu_key = {{ltk_key = 0x44f70c, ltk_data = 0x7fffe40028f0, ltk_free = 0x44f5df <conn_counter_destroy>}, {ltk_key = 0x4caa67, ltk_data = 0x7fffe4002780, ltk_free = 0x4ca88c <slap_sl_mem_destroy>}, {ltk_key = 0x46c531, ltk_data = 0x0, ltk_free = 0x46c484 <slap_op_q_destroy>}, {ltk_key = 0xbd9430, ltk_data = 0x7fffe4106590, ltk_free = 0x56eac3 <bdb_reader_free>}, {ltk_key = 0x0, ltk_data = 0x7fffe4000ac0, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 22 times>, {ltk_key = 0x0, ltk_data = 0x7ffff6c46ba5, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}}} kctx = 0x0 i = 32 keyslot = 949 hash = 3994472373 __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper" #14 0x00007ffff6c45d14 in start_thread (arg=0x7ffff23e6700) at pthread_create.c:309 __res = <optimized out> pd = 0x7ffff23e6700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737257563904, -4915901394837331576, 1, 140737354125312, 140737257563904, 0, 4915909644372648328, 4915916705226662280}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = 0 pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #15 0x00007ffff611867d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 No locals.