(ITS#5473) double-free in test030

[hyc@OpenLDAP.org]

Full_Name: Howard Chu
Version: RE24
OS: OpenSUSE 10.2
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (76.91.220.157)
Submitted by: hyc


Sometimes (but not always) caused a SEGV during the run. Valgrind shows:

==2991==
==2991== Thread 5:
==2991== Invalid free() / delete / delete[]
==2991==    at 0x402312F: free (vg_replace_malloc.c:233)
==2991==    by 0x8097D57: ch_free (ch_malloc.c:139)
==2991==    by 0x455496B: rwm_op_cleanup (rwm.c:64)
==2991==    by 0x808BFB3: slap_cleanup_play (result.c:341)
==2991==    by 0x808ECD6: send_ldap_response (result.c:522)
==2991==    by 0x808F4A5: slap_send_ldap_extended (result.c:698)
==2991==    by 0x80AE46C: fe_extended (extended.c:240)
==2991==    by 0x80AE91B: do_extended (extended.c:180)
==2991==    by 0x807C8B4: connection_operation (connection.c:1084)
==2991==    by 0x807CD41: connection_read_thread (connection.c:1211)
==2991==    by 0x816E4C3: ldap_int_thread_pool_wrapper (tpool.c:663)
==2991==    by 0x42BB111: start_thread (in /lib/libpthread-2.5.so)
==2991==  Address 0x4704DA8 is 0 bytes inside a block of size 65 free'd
==2991==    at 0x402312F: free (vg_replace_malloc.c:233)
==2991==    by 0x80AF9B3: passwd_extop (passwd.c:317)
==2991==    by 0x80AE430: fe_extended (extended.c:225)
==2991==    by 0x80AE91B: do_extended (extended.c:180)
==2991==    by 0x807C8B4: connection_operation (connection.c:1084)
==2991==    by 0x807CD41: connection_read_thread (connection.c:1211)
==2991==    by 0x816E4C3: ldap_int_thread_pool_wrapper (tpool.c:663)
==2991==    by 0x42BB111: start_thread (in /lib/libpthread-2.5.so)
==2991==    by 0x438D2ED: clone (in /lib/libc-2.5.so)
==2991==