This follow-up is just to add some missing details to the log, since this is getting some traffic now.

A query that reproduces the crash is: ldapsearch -E 'mv=(cn={*)(sn=*)'

It was introduced by "ITS#7942 plug leak in controls": commit 9d991339 on master, ffd0f03b on RE24. vrFilter_free was broken for a long time, but was never called until the leak was fixed in that ITS.

hope that helps, Ryan