use of freed memory (ITS#2778)

[kurt@OpenLDAP.org]

Full_Name: Kurt Zeilenga
Version: HEAD
OS: FreeBSD
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (198.144.202.241)


When running test018-syncreplication-persist with MALLOC_OPTIONS
set to AJX, which amongst other things, causes each byte of
allocated and deallocated memory to be set to 0xd0, the following
crash occurs.  This implies either uninitialized use of allocated
memory or use of deallocated memory.


#0  attrs_free (a=0xd0d0d0d0) at attr.c:39
39                      next = a->a_next;
(gdb) where
#0  attrs_free (a=0xd0d0d0d0) at attr.c:39
#1  0x809d5cb in bdb_entry_return (e=0x89bf4cc) at id2entry.c:160
#2  0x80984e0 in bdb_entryinfo_release (data=0x8ac0100) at cache.c:1003
#3  0x80a35cd in avl_free (root=0x8176610, 
    dfree=0x80984a8 <bdb_entryinfo_release>) at avl.c:619
#4  0x80a35bc in avl_free (root=0x8176590, 
    dfree=0x80984a8 <bdb_entryinfo_release>) at avl.c:616
#5  0x80a35a6 in avl_free (root=0x81764f0, 
    dfree=0x80984a8 <bdb_entryinfo_release>) at avl.c:613
#6  0x80a35a6 in avl_free (root=0x8176e20, 
    dfree=0x80984a8 <bdb_entryinfo_release>) at avl.c:613
#7  0x8098582 in bdb_cache_release_all (cache=0x8120724) at cache.c:1023
#8  0x8089e40 in bdb_db_close (be=0x8120500) at init.c:477
#9  0x805eec5 in backend_shutdown (be=0x0) at backend.c:428
#10 0x8070e8d in slap_shutdown (be=0x0) at init.c:215
#11 0x804cb91 in main (argc=8, argv=0xbfbff4c0) at main.c:589
(gdb) up