stef@memberwebs.com wrote:

Full_Name: Stef Walter Version: 2.4.11 OS: FreeBSD 6.3-RELEASE-p2 URL: Submission from: (NULL) (38.99.5.20)

When the following line is present in the schema (or slapd.conf), then upon exit any slap* process aborts due to a double free of memory:

attributetype ( 278.1.3.6.1 NAME 'requireClass' SUP objectClass )

The OID is obviously fictional. This can be triggered reliably by running:

# slaptest

This also occurs in 2.3, and is specific to objectClass and a few other built in attributes with custom matching rules.