Hello
NetBSD's libc reports a multiple free each time I run 2.4.15's ldapsearch using x509 certificate authentication (That is, SASL EXTERNAL):
Running with export MALLOC_OPTIONS=A, it is kind enough to abort, so I have a backtrace:
(gdb) bt #0 0xbb94223f in kill () from /usr/lib/libc.so.12 #1 0xbb9dea64 in abort () from /usr/lib/libc.so.12 #2 0xbb9dd300 in tcgetattr () from /usr/lib/libc.so.12 #3 0xbb9dd331 in tcgetattr () from /usr/lib/libc.so.12 #4 0xbb9de661 in free () from /usr/lib/libc.so.12 #5 0xbbaff5c7 in CRYPTO_free () from /usr/lib/libcrypto.so.3 #6 0xbbad0871 in X509_asn1_meth () from /usr/lib/libcrypto.so.3 #7 0xbbaec6d7 in ASN1_primitive_free () from /usr/lib/libcrypto.so.3 #8 0xbbaec8f3 in ASN1_item_free () from /usr/lib/libcrypto.so.3 #9 0xbbad09dd in X509_free () from /usr/lib/libcrypto.so.3 #10 0xbbb6fe31 in ssl_cert_free () from /usr/lib/libssl.so.4 #11 0xbbb6d981 in SSL_CTX_free () from /usr/lib/libssl.so.4 #12 0xbbbe008f in tlso_ctx_free () from /usr/pkg/lib/libldap-2.4.so.2 #13 0xbbbdce5b in ldap_pvt_tls_ctx_free () from /usr/pkg/lib/libldap-2.4.so.2 #14 0xbbbdcf78 in ldap_int_tls_destroy () from /usr/pkg/lib/libldap-2.4.so.2 #15 0xbbbdd06e in ldap_pvt_tls_destroy () from /usr/pkg/lib/libldap-2.4.so.2 #16 0x08050e88 in ?? () #17 0x00000000 in ?? ()
I will investigate further if I find time, but I post this just in case it rings a bell for someone.