On Tue, Jul 14, 2015 at 11:13:56AM +0000, luca.bruno@rocket-internet.de wrote:

slapd 2.4.40 realiably crashes when modifying the 0th olcAttributeTypes element in a olcSchemaConfig object.

This doesn't match my experience exactly, but if you were editing the config with some tool, it might reflect how that tool implements modifications.

I reproduced the crash with the following changeset:

dn: cn={2}nis,cn=schema,cn=config changetype: modify replace: olcAttributeTypes olcAttributeTypes: {1}( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The absolute path to the home directory' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

Deleting all values clears c_at_head and c_at_tail (bconfig.c:1541). Adding a specific non-zero index assumes the head is already valid.

This was already fixed for olcObjectClasses in ITS#5388. I've pushed a patch doing the same for at_next, can you please verify it?

http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=patch;h=b48d0169d0...