(ITS#3685) 2.2.25 SEGV on ADD

[richton@nbcs.rutgers.edu]

Full_Name: Aaron Richton
Version: 2.2.25
OS: Solaris 9
URL: 
Submission from: (NULL) (128.6.31.137)


2.2.25 SEGVs on me. 2.2.23 didn't.

It may or may not be related that 2.2.25 is the first release I've ever
configured --with-dyngroup. This appears to have occurred during the first ADD
operation performed on this (master) slapd. Hopefully, the core dump will help;
I might be able to revisit this with a memory debugger later on (off-hours).

Thread 4 (process 200218    ):
#0  0xfede58fc in __lwp_park () from /usr/lib/libthread.so.1
#1  0xfede2ba8 in cond_wait_queue () from /usr/lib/libthread.so.1
#2  0xfede3364 in cond_wait () from /usr/lib/libthread.so.1
#3  0xfede33a0 in pthread_cond_wait () from /usr/lib/libthread.so.1
#4  0x0016c918 in ldap_pvt_thread_cond_wait (cond=0x2ed7c0, mutex=0x2ed710)
    at thr_posix.c:251
#5  0x000709f8 in send_ldap_ber (conn=0x2ed700, ber=0xda73f638) at result.c:211
#6  0x0007472c in slap_send_search_entry (op=0x301448, rs=0xda7ffd58)
    at result.c:1311
#7  0x000f91d4 in hdb_do_search () at tools.c:283
#8  0x000f5714 in hdb_search () at tools.c:283
#9  0x0005f668 in do_search (op=0x301448, rs=0xda7ffd58) at search.c:412
#10 0x0005bb34 in _end ()
#11 0x0016b4c8 in ldap_int_thread_pool_wrapper (xpool=0x241510) at tpool.c:467

Thread 3 (process 134682    ):
#0  0xfee9d608 in kaio () from /usr/lib/libc.so.1
#1  0xfee51e78 in backref () from /usr/lib/libc.so.1
#2  0xfedde6b4 in select () from /usr/lib/libthread.so.1
#3  0x00056878 in slapd_daemon_task (ptr=0x0) at daemon.c:1422

Thread 2 (process 69146    ):
#0  0xfee9f334 in _signotifywait () from /usr/lib/libc.so.1
#1  0xfeddd6bc in lwp_wait () from /usr/lib/libthread.so.1
#2  0xfedd90f0 in _thrp_join () from /usr/lib/libthread.so.1
#3  0x0016c750 in ldap_pvt_thread_join (thread=2, thread_return=0x0)
    at thr_posix.c:151
#4  0x00058394 in slapd_daemon () at daemon.c:2041
#5  0x00046ae4 in main (argc=4, argv=0xffbffd94) at main.c:713

Thread 1 (process 265754    ):
#0  0xfee46ed4 in _malloc_unlocked () from /usr/lib/libc.so.1
#1  0xfee477a0 in _morecore () from /usr/lib/libc.so.1
#2  0xfee468dc in getrule () from /usr/lib/libc.so.1
#3  0xfee467bc in getoffset () from /usr/lib/libc.so.1
#4  0x001b0958 in ber_memalloc_x (s=20, ctx=0x0) at memory.c:232
#5  0x00080290 in ch_malloc (size=20) at ch_malloc.c:155
#6  0x00068328 in attr_merge (e=0x40f710, desc=0x23a6d8, vals=0xd9fff798,
    nvals=0x0) at attr.c:165
#7  0x0012bef8 in hdb_csn_commit (op=0xee2ed8, rs=0xd9fffd58, tid=0x19cd288,
    ei=0xc1f648, suffix_ei=0xd9fff99c, ctxcsn_e=0xd9fff998,
    ctxcsn_added=0xd9fff994, locker=2147515956) at ctxcsn.c:97
#8  0x00125358 in hdb_add (op=0xee2ed8, rs=0xd9fffd58) at add.c:373
#9  0x00065804 in do_add (op=0xee2ed8, rs=0xd9fffd58) at add.c:318
#10 0x0005b9cc in _end ()
#11 0x0016b4c8 in ldap_int_thread_pool_wrapper (xpool=0x241510) at tpool.c:467