back-bdb core dump (ITS#3358)

[rhafer@suse.de]

Full_Name: Ralf Haferkamp
Version: 2.2.17
OS: Linux (Kernel 2.6)
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (212.95.102.198)


slapd crashed on me while running a test similar to test008-concurency (50
clients modify and one client adding/deleting entries).

I was able to get the following backtrace:
----------------------------
#0  0x080c7d14 in bdb_cache_delete_cleanup (cache=0x816b208, e=0x48bd82b0)
    at cache.c:1035
        ei = (EntryInfo *) 0x0
#1  0x080cba10 in bdb_delete (op=0x456acbf0, rs=0x43300870) at delete.c:672
        bdb = (struct bdb_info *) 0x816b1d0
        matched = (Entry *) 0x0
        pdn = {bv_len = 11, bv_val = 0x43301148 "o=customers"}
        e = (Entry *) 0x48bd82b0
        p = (Entry *) 0x0
        ei = (EntryInfo *) 0x456a8208
        eip = (EntryInfo *) 0x81801e8
        manageDSAit = 0
        children = (AttributeDescription *) 0x812a858
        entry = (AttributeDescription *) 0x812a6c8
        ltid = (DB_TXN *) 0x0
        lt2 = (DB_TXN *) 0x4b435c70
        opinfo = {boi_bdb = 0x816b0d0, boi_txn = 0x48632c00, boi_lock = {
    off = 1242267080, ndx = 0, gen = 1127220904, mode = 1077038768}, 
  boi_err = 0, boi_locker = 2150830291, boi_acl_cache = 0}
        locker = 2150830291
        lock = {off = 291640, ndx = 208, gen = 377760, mode = DB_LOCK_WRITE}
        plock = {off = 299560, ndx = 386, gen = 353479, mode = DB_LOCK_READ}
        num_retries = 0
        ps_list = (Operation *) 0x0
        rc = 0
        suffix_ei = (EntryInfo *) 0x21
        ctxcsn_e = (Entry *) 0x4384e850
        ctxcsn_added = 0
        preread_ctrl = (LDAPControl **) 0x0
        ctrls = {0x0, 0x43800010, 0x433007e0, 0x43300648, 0x40391f74, 
  0x43800010}
        num_ctrls = 0
        parent_is_glue = 0
        parent_is_leaf = 1
#2  0x0807a072 in do_delete (op=0x456acbf0, rs=0x43300870) at delete.c:230
        cb = {sc_next = 0x0, sc_response = 0x8071246 <slap_replog_cb>, 
  sc_cleanup = 0, sc_private = 0x0}
        csnbuf = "??C@\020\0000F\030.YJ?\a0C+\0029@\020\0000F\030.YJ?\001\a@\000\000\000\000?\b0C?\a0C2?\006@?J2@\210!\030\b(\b0C\000\000\000"
        repl_user = 0
        dn = {bv_len = 23, bv_val = 0x4ba8a326 "cn=test8355,o=customers"}
        pdn = {bv_len = 0, bv_val = 0x0}
        org_req_dn = {bv_len = 0, bv_val = 0x0}
        org_req_ndn = {bv_len = 0, bv_val = 0x0}
        org_dn = {bv_len = 0, bv_val = 0x0}
        org_ndn = {bv_len = 0, bv_val = 0x0}
        org_managedsait = 0
        manageDSAit = 0
#3  0x080644f2 in connection_operation (ctx=0x43300900, arg_v=0x456acbf0)
    at connection.c:1059
        rc = 80
        op = (Operation *) 0x456acbf0
        rs = {sr_type = REP_RESULT, sr_tag = 107, sr_msgid = 12814, 
  sr_err = 0, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, 
  sr_un = {sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, 
      r_rspdata = 0x0}, sru_search = {r_entry = 0x0, r_attrs = 0x0, 
      r_nentries = 0, r_v2ref = 0x0}}, sr_flags = 0}
        tag = 74
        oldtag = 74
        conn = (Connection *) 0x418bb204
        memctx = (void *) 0x8182188
        memctx_null = (void *) 0x0
        memsiz = 1048576
#4  0x400316bd in ldap_int_thread_pool_wrapper (xpool=0x812c4c8) at tpool.c:467
        pool = (struct ldap_int_thread_pool_s *) 0x812c4c8
        ctx = (ldap_int_thread_ctx_t *) 0x452652a0
        ltc_key = {{ltk_key = 0x80a4078, ltk_data = 0x8182188, 
    ltk_free = 0x80a4048 <sl_mem_destroy>}, {ltk_key = 0x8176840, 
    ltk_data = 0x30, ltk_free = 0x80c8257 <bdb_locker_id_free>}, {
    ltk_key = 0x8176841, ltk_data = 0x8186110, 
    ltk_free = 0x80c80c3 <bdb_txn_free>}, {ltk_key = 0x0, ltk_data = 0x0, 
    ltk_free = 0} <repeats 29 times>}
        tid = 1127222192
        i = 302
        keyslot = 302
        hash = 302
#5  0x403239ed in start_thread () from /lib/tls/libpthread.so.0
No symbol table info available.
#6  0x403e59ca in clone () from /lib/tls/libc.so.6
No symbol table info available.
-------------------------------------