(ITS#7102) slapd segfaults on slapo-dds refresh with syncprov enabled

[dieter@dkluenter.de]

Full_Name: Dieter Kluenter
Version: 
OS: 
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (141.38.5.243)


slapd crashes with segmentation fault on a slapo-dds refresh operation, if
syncprov is enabled and configured 

(gdb) bt
#0  0x00000000004dd429 in slap_get_commit_csn (op=0x7f01d8013530,
maxcsn=0x7f01e6a346d0, foundit=0x7f01e6a346cc) at ctxcsn.c:59
#1  0x00007f01f0d0a401 in syncprov_op_response (op=0x7f01d8013530,
rs=0x7f01e6a34a30) at syncprov.c:1793
#2  0x000000000045cbff in slap_response_play (op=0x7f01d8013530,
rs=0x7f01e6a34a30) at result.c:505
#3  0x000000000045ce24 in send_ldap_response (op=0x7f01d8013530,
rs=0x7f01e6a34a30) at result.c:580
#4  0x000000000045e292 in slap_send_ldap_extended (op=0x7f01d8013530,
rs=0x7f01e6a34a30) at result.c:915
#5  0x000000000048aedb in fe_extended (op=0x7f01d8013530, rs=0x7f01e6a34a30) at
extended.c:237
#6  0x000000000048ab57 in do_extended (op=0x7f01d8013530, rs=0x7f01e6a34a30) at
extended.c:177
#7  0x0000000000446a15 in connection_operation (ctx=0x7f01e6a34b60,
arg_v=0x7f01d8013530) at connection.c:1138
#8  0x0000000000446fb3 in connection_read_thread (ctx=0x7f01e6a34b60, argv=0x10)
at connection.c:1274
#9  0x00007f01f5929fc0 in ldap_int_thread_pool_wrapper (xpool=0x91d540) at
tpool.c:685
#10 0x00007f01f48f0a3f in start_thread (arg=0x7f01e6a35700) at
pthread_create.c:297
#11 0x00007f01f3c1166d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#12 0x0000000000000000 in ?? ()
(gdb) frame 0
#0  0x00000000004dd429 in slap_get_commit_csn (op=0x7f01d8013530,
maxcsn=0x7f01e6a346d0, foundit=0x7f01e6a346cc) at ctxcsn.c:59
59		LDAP_TAILQ_FOREACH( csne, be->be_pending_csn_list, ce_csn_link ) {
(gdb) frame 1
#1  0x00007f01f0d0a401 in syncprov_op_response (op=0x7f01d8013530,
rs=0x7f01e6a34a30) at syncprov.c:1793
1793			slap_get_commit_csn( op, &maxcsn, &foundit );
(gdb) frame 2
#2  0x000000000045cbff in slap_response_play (op=0x7f01d8013530,
rs=0x7f01e6a34a30) at result.c:505
505				rc = op->o_callback->sc_response( op, rs );
(gdb) frame 3
#3  0x000000000045ce24 in send_ldap_response (op=0x7f01d8013530,
rs=0x7f01e6a34a30) at result.c:580
580			rc = slap_response_play( op, rs );
(gdb) 

-Dieter