Full_Name: Ralf Haferkamp Version: HEAD, RE24 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (89.166.152.188)

slapd segfaults after trying to add an invalid database entry to cn=config. E.g. I used this one to reproduce the problem (substring index is not allowed for objectclass):

dn: olcdatabase=hdb,cn=config objectclass: olchdbconfig olcdatabase: hdb olcsuffix: cn=test olcdbdirectory: /tmp olcdbcheckpoint: 3 5 olcdbindex: objectclass sub

It crashes in the checkpoint runqueue task, which it seems has not be removed after the failed ADD operation:

#0 0x000000000052303e in hdb_checkpoint (ctx=0x41f81dd0, arg=0xb1bfb0) at config.c:181 #1 0x00007f3cbcdd502f in ldap_int_thread_pool_wrapper (xpool=0x8ec640) at ../../../libraries/libldap_r/tpool.c:663 #2 0x00007f3cb9d73040 in start_thread () from /lib64/libpthread.so.0 #3 0x00007f3cb9ae60cd in clone () from /lib64/libc.so.6

A fix is on the way to HEAD.