"kurt" == Kurt Zeilenga kurt@openldap.org writes:
kurt> IMO, the bug is in ldapsearch(1).
The bug was discovered in a program, not ldapsearch, and wouldn't have been noticed other than it reliably terminating the connection to the server, rather than letting the program continue.
The ldap_search_s() returned LDAP_SUCCESS and the ldap_first_entry was where the assert discovered the closed connection.
So, if this is only a bug in ldapsearch, all the programs that call ldap_search will need to not only check for LDAP_SUCCESS, but also for the LDAP * structure being closed.