(ITS#7237) Crash abandoning freed/unused operation

[h.b.furuseth@usit.uio.no]

Full_Name: Hallvard B Furuseth
Version: RE24 + master patches
OS: Linux x86_64
URL: http://folk.uio.no/hbf/test045.testrun.tgz
Submission from: (NULL) (195.1.106.125)
Submitted by: hallvard


'./run -b ldif test045-syncreplication-proxied' crashed
in connection_abandon() with LDAP_MEMORY_DEBUG:
It dereferenced o_hdr which is NULL in the uninitialized or
freed op 'o'.  (op 'o' is full of 0xFF bytes, which I
assume is the poiosin from liblber/memory.c.)

The code is RE24 + recent master patches:

RE24 (0e03b1369f4da5db9d0bdd2445b3a7ccc0c5638f)
+ ITS#7228 check for unexpected result from ldapsearch
+ ITS#7231 fix idl_append when b has only 1 element
+ ITS#7231 simplify prev commit
+ ITS#7233 Fix slapd listener initialization.
+ ITS#7234 Fix syncprov entry leak: Set op->o_tag
+ ITS#7235 prevent sop from being freed during init

Configured with --enable-overlays --enable-backends --disable-sql --disable-ndb
--enable-cleartext --enable-dynacl --enable-aci --enable-crypt --enable-lmpasswd
--enable-spasswd --enable-modules --enable-rlookups --enable-slapi
--enable-wrappers CFLAGS="-O0 -g" CPPFLAGS="-DLDAP_MEMORY_DEBUG
-DLDAP_THREAD_DEBUG=2 -DUSE_RS_ASSERT".

Test output and some GDB trace info enclosed.