RE : Crash in SASL bind (ITS#2577)

[emmanuel.duru@atosorigin.com]

(gdb) where
#0  0xff0a9794 in __sigprocmask () from /usr/lib/libthread.so.1
#1  0xff09e9a8 in _resetsig () from /usr/lib/libthread.so.1
#2  0xff09e148 in _sigon () from /usr/lib/libthread.so.1
#3  0xff0a1188 in _thrp_kill () from /usr/lib/libthread.so.1
#4  0xff14b760 in raise () from /usr/lib/libc.so.1
#5  0xff135a84 in abort () from /usr/lib/libc.so.1
#6  0x221348 in Letext ()
#7  0x63858 in access_allowed (op=0xfd0014d8, e=0x409f78, desc=0x0,
val=0x0, 
    access=ACL_SEARCH, state=0x0) at acl.c:131
#8  0x629e8 in test_presence_filter (op=0xfd0014d8, e=0x409f78,
desc=0x0) at filterentry.c:499
#9  0x6207c in test_filter (op=0xfd0014d8, e=0x409f78, f=0x280460) at
filterentry.c:107
#10 0x8bd74 in bdb_do_search (op=0xfd0014d8, rs=0xfd001490,
sop=0xfd0014d8, ps_e=0x0, 
    ps_type=0) at search.c:1107
#11 0x8a7e8 in bdb_search (op=0xfd0014d8, rs=0xfd001490) at search.c:357
#12 0x7c1fc in slap_auxprop_lookup (glob_context=0x0, sparams=0x30,
flags=0, 
    user=0x308c89 "putois@rahil", ulen=12) at sasl.c:450
#13 0xff3642a8 in _sasl_auxprop_lookup (sparams=0x308db0, flags=0, 
    user=0x308c89 "putois@rahil", ulen=12) at auxprop.c:863
#14 0xff364794 in _sasl_canon_user (conn=0x308278, user=0x308c89
"putois@rahil", ulen=12, 
    flags=1, oparams=0x308ad8) at canonusr.c:190
#15 0xfe7a4224 in digestmd5_server_mech_step2 (stext=0x409a70,
sparams=0x308db0, 
    clientin=0xc4 <Address 0xc4 out of bounds>, clientinlen=184,
serverout=0xfd0019b4, 
    serveroutlen=0xfd0019a0, oparams=0x308ad8) at digestmd5.c:2391
#16 0xfe7a4da0 in digestmd5_server_mech_step (conn_context=0x409a70,
sparams=0x308db0, 
    clientin=0x309618
"username=\"putois@rahil\",realm=\"rahil.sc.atosorigin.com\",authzid=\"d
n:cn=user2,ou=people,o=sota\",nonce=\"Fm2USFoWKCIHzGmu5ecg0hmpdY1d8y216g
B8L21Zje4=\",cnonce=\"Fm2USFoWKCIHzGmu5ecg0hmpdY1d8y216gB8L21Zje4="...,
clientinlen=319, serverout=0xfd0019b4, 
    serveroutlen=0xfd0019a0, oparams=0x308ad8) at digestmd5.c:2779
#17 0xff36de94 in sasl_server_step (conn=0x308278, 
    clientin=0x309618
"username=\"putois@rahil\",realm=\"rahil.sc.atosorigin.com\",authzid=\"d
n:cn=user2,ou=people,o=sota\",nonce=\"Fm2USFoWKCIHzGmu5ecg0hmpdY1d8y216g
B8L21Zje4=\",cnonce=\"Fm2USFoWKCIHzGmu5ecg0hmpdY1d8y216gB8L21Zje4="...,
clientinlen=319, serverout=0xfd0019b4, 
    serveroutlen=0xfd0019a0) at server.c:1259
#18 0x7d57c in slap_sasl_bind (op=0x3094f8, rs=0xfd001ad8) at
sasl.c:1386
#19 0x60c84 in do_bind (op=0x3094f8, rs=0xfd001ad8) at bind.c:295
#20 0x4d3f0 in connection_operation (ctx=0xfd001b80, arg_v=0x3094f8) at
connection.c:943
#21 0xca234 in ldap_int_thread_pool_wrapper (xpool=0x2ae0a8) at
tpool.c:463

-----Message d'origine-----
De : Kurt D. Zeilenga [mailto:Kurt@OpenLDAP.org] 
Envoyé : jeudi 5 juin 2003 22:15
À : emmanuel.duru@atosorigin.com
Cc : openldap-its@OpenLDAP.org
Objet : Re: Crash in SASL bind (ITS#2577)


Please provide a stack back trace from the crash.  Thanks, Kurt

At 12:46 AM 6/5/2003, emmanuel.duru@atosorigin.com wrote:
>Full_Name: Emmanuel Duru
>Version: 2.2.0 alpha
>OS: solaris 8
>URL: ftp://ftp.openldap.org/incoming/
>Submission from: (NULL) (195.68.44.148)
>
>
>In 2.2.0 alpha (20030531), when a client SASL binds to the server, the
server
>crashes, because sasl.c uses a filter with a null attribute descriptor.
>The problem is that the generic_filter used is initialized in
slap_sasl_init()
>from the schema, which is not yet loaded: slap_schema_init() is called
in main.c
>after slap_init(), slap-init() calls slap_sasl_init().
>Proposed correction : move the slap_sasl_init() call from slap_init()
to main(),
>after slap_schema_init().