(ITS#4673) slapd segfaults when adding entry to translucent overlay

[weber@ri.uni-tuebingen.de]

Full_Name: Nico Weber
Version: 2.3.27 and OPENLDAP_REL_ENG_2_4_3ALPHA
OS: gentoo
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (134.2.202.136)


slapd segfaults[3] when trying to add/modify data[2] via an translucent
overlay[1]

when adding attribute does not exist on remote/proxied ldap slapd segfaults.
tested with 2.3.24/2.3.27 and OPENLDAP_REL_ENG_2_4_3ALPHA

there are a lot of different results using different backends (ldif) sometimes
it works for some time sometimes not.

sometimes adding object works but segfaults when trying to modify different
attribute.

cheers,

nico

[1]
database bdb
suffix          "dc=example,dc=com"
directory       /var/lib/openldap-data/overlay2
overlay translucent
uri     "ldap://ip";

acl-bind
        bindmethod=simple
        binddn="cn=test12,dc=example,dc=com"
        credentials="asdf1234"
        authzID="test12"

idassert-bind
        bindmethod=simple
        binddn="cn=test12,dc=example,dc=com"
        credentials="asdf1234"
        mode=none


[2]
dn: cn=test test,dc=example,dc=com
changetype: modify
add: uidNumber
uidNumber: 6777

[3]
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1225233488 (LWP 8051)]
0x080b7f7a in objectSubClassIndexer (use=163, mask=4, syntax=0x81fce30,
mr=0x81fce60, prefix=0x81fcd7c, values=0x0,
    keysp=0xb6f84858, ctx=0x8273a68) at schema_prep.c:254
254     schema_prep.c: No such file or directory.
        in schema_prep.c
(gdb) bt
#0  0x080b7f7a in objectSubClassIndexer (use=163, mask=4, syntax=0x81fce30,
mr=0x81fce60, prefix=0x81fcd7c, values=0x0,
    keysp=0xb6f84858, ctx=0x8273a68) at schema_prep.c:254
#1  0x08113e56 in indexer (op=0xb6f84c00, txn=0x8275cd8, ad=0x81fce10,
atname=0x81fcd7c, vals=0x0, id=8, opid=1, mask=4)
    at index.c:192
#2  0x081142aa in index_at_values (op=0xb6f84c00, txn=0x8275cd8, ad=0x81fce10,
type=0x81fcd40, tags=0x81fce20, vals=0x0, id=8,
    opid=1) at index.c:324
#3  0x08114404 in bdb_index_values (op=0xb6f84c00, txn=0x8275cd8,
desc=0x81fce10, vals=0x0, id=8, opid=1) at index.c:373
#4  0x08114795 in bdb_index_entry (op=0xb6f84c00, txn=0x8275cd8, opid=1,
e=0xb6f84bc0) at index.c:536
#5  0x08104707 in bdb_add (op=0xb6f84c00, rs=0xb6f84cd0) at add.c:296
#6  0x08153d32 in translucent_modify (op=0x82741c8, rs=0xb6f86240) at
translucent.c:407
#7  0x080dfd80 in overlay_op_walk (op=0x82741c8, rs=0xb6f86240, which=op_modify,
oi=0x8225218, on=0x8225318) at backover.c:491
#8  0x080dffa2 in over_op_func (op=0x82741c8, rs=0xb6f86240, which=op_modify) at
backover.c:551
#9  0x080e0077 in over_op_modify (op=0x82741c8, rs=0xb6f86240) at
backover.c:585
#10 0x08090809 in fe_op_modify (op=0x82741c8, rs=0xb6f86240) at modify.c:395
#11 0x0808fa82 in do_modify (op=0x82741c8, rs=0xb6f86240) at modify.c:200
#12 0x08075618 in connection_operation (ctx=0xb6f862d0, arg_v=0x82741c8) at
connection.c:1307
#13 0xb7ef1de3 in ldap_int_thread_pool_wrapper (xpool=0x82033f8) at tpool.c:478
#14 0xb7df42ab in start_thread () from /lib/libpthread.so.0
#15 0xb7bb4e2e in clone () from /lib/libc.so.6