(ITS#7384) Assert Crash in ppolicy_ctrls_cleanup

[ghola@rebelbase.com]

Full_Name: Duncan Idaho
Version: 2.4.32
OS: Centos 5.5
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (216.148.0.72)


We are seeing this a few times a week in our environment.

#0  0x0000003874c30265 in raise () from /lib64/libc.so.6
#1  0x0000003874c31d10 in abort () from /lib64/libc.so.6
#2  0x0000003874c296e6 in __assert_fail () from /lib64/libc.so.6
#3  0x000000000055c369 in ctrls_cleanup (op=0x11144d40, rs=0x42e3cc10,
oldctrls=0x11251620) at ppolicy.c:870
#4  0x000000000055c4aa in ppolicy_ctrls_cleanup (op=0x11144d40, rs=0x42e3cc10)
at ppolicy.c:895
#5  0x0000000000442a46 in slap_cleanup_play (op=0x11144d40, rs=0x42e3cc10) at
result.c:541
#6  0x0000000000443229 in send_ldap_response (op=0x11144d40, rs=0x42e3cc10) at
result.c:733
#7  0x0000000000443a5d in slap_send_ldap_result (op=0x11144d40, rs=0x42e3cc10)
at result.c:860
#8  0x000000000052d7d7 in hdb_bind (op=0x11144d40, rs=0x42e3cc10) at bind.c:158
#9  0x00000000004bc67a in overlay_op_walk (op=0x11144d40, rs=0x42e3cc10,
which=op_bind, oi=0x10af8670, on=0x0) at backover.c:671
#10 0x00000000004bc87d in over_op_func (op=0x11144d40, rs=0x42e3cc10,
which=op_bind) at backover.c:723
#11 0x00000000004bc903 in over_op_bind (op=0x11144d40, rs=0x42e3cc10) at
backover.c:738
#12 0x0000000000514136 in relay_back_op (op=0x11144d40, rs=0x42e3cc10, which=0)
at op.c:210
#13 0x00000000005142b9 in relay_back_op_bind (op=0x11144d40, rs=0x42e3cc10) at
op.c:243
#14 0x00000000004bc67a in overlay_op_walk (op=0x11144d40, rs=0x42e3cc10,
which=op_bind, oi=0x10af97f0, on=0x0) at backover.c:671
#15 0x00000000004bc87d in over_op_func (op=0x11144d40, rs=0x42e3cc10,
which=op_bind) at backover.c:723
#16 0x00000000004bc903 in over_op_bind (op=0x11144d40, rs=0x42e3cc10) at
backover.c:738
#17 0x000000000045520d in fe_op_bind (op=0x11144d40, rs=0x42e3cc10) at
bind.c:383
#18 0x000000000045493c in do_bind (op=0x11144d40, rs=0x42e3cc10) at bind.c:205
#19 0x000000000042cbd4 in connection_operation (ctx=0x42e3cd60,
arg_v=0x11144d40) at connection.c:1150
#20 0x000000000042d159 in connection_read_thread (ctx=0x42e3cd60, argv=0xc7) at
connection.c:1286
#21 0x000000000058c6c1 in ldap_int_thread_pool_wrapper (xpool=0x109dfe80) at
tpool.c:688
#22 0x000000387540673d in start_thread () from /lib64/libpthread.so.0
#23 0x0000003874cd3d1d in clone () from /lib64/libc.so.6
#24 0x0000000000000000 in ?? ()