hyc@symas.com wrote:

michael.vishchers@7p-group.com wrote:

...

Full_Name: Michael Vishchers Version: 2.4.36 OS: RHEL 6.3 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (109.41.86.33)

The bug mentioned in ITS #7716 unfortunately still persists in 2.4.36.

We now found a way to reproduce it:

If you want anyone to spend time on this:

Send the stack trace from the crash. Also send your slapd config, sample data, and the actual query used in your client.

...

• make sure that threads can run freely (i.e., provide enough cpus)

...

• start slapd with the rwm overlay
• run a client loop that

-- binds as a valid user -- sends a valid search request that is *immediately* (i.e., don't wait for any answers) followed by an unbind request

after several iterations (with 2.4.23 it was between 2 and 7, with 2.4.36 it was about 30) slapd crashes in malloc.c