Re: (ITS#7968) SIGSEGV shortly after reconnection performed by syncrepl due to synchronization conflicts

[leo@yuriev.ru]

Program terminated with signal 11, Segmentation fault.
#0  0x00007ffda90d607b in ?? () from /lib/x86_64-linux-gnu/libc.so.6
(gdb) bt
#0  0x00007ffda90d607b in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x000000000047fb7c in do_syncrep2 (op=0x7ffd68cf5740, si=0x1681d00) 
at syncrepl.c:893
#2  0x0000000000483903 in do_syncrepl (ctx=<optimised out>, 
arg=0x1682090) at syncrepl.c:1551
#3  0x00000000004250e8 in connection_input (cri=<optimised out>, 
conn=<optimised out>) at connection.c:1732
#4  connection_read (cri=<optimised out>, s=<optimised out>) at 
connection.c:1460
#5  connection_read_thread (ctx=0x7ffd68cf5bd0, argv=0x25) at 
connection.c:1284
#6  0x00007ffda9777d22 in ldap_int_thread_pool_wrapper (xpool=0x1635090) 
at tpool.c:688
#7  0x00007ffda93420a5 in start_thread () from 
/lib/x86_64-linux-gnu/libpthread.so.0
#8  0x00007ffda906f84d in clone () from /lib/x86_64-linux-gnu/libc.so.6
(gdb) frame 1
#1  0x000000000047fb7c in do_syncrep2 (op=0x7ffd68cf5740, si=0x1681d00) 
at syncrepl.c:893
893                    Debug( LDAP_DEBUG_ANY, "do_syncrep2: %s malformed 
message (%s)\n",
(gdb) info locals
syncUUID = {{bv_len = 16, bv_val = 0x7ffd543a98b7 
"\177]\201N\f'\020\064\235\255Õ?\v\247\331", <incomplete sequence \351>}, 
{bv_len = 128849018894, bv_val = 0x7ffd68cf4ec4 "\375\177"}}
cookie = {bv_len = 60, bv_val = 0x7ffd543a98c9 
"rid=002,sid=002,csn=20141129152404.971057Z#000000#001#000000"}
rctrls = 0x7ffd543f7130
bdn = {bv_len = 33, bv_val = 0x7ffd543706f7 
"cn=modem,uid=4711,dc=ngdr,dc=ldap"}
si_tag = 1
syncstate = 3
retdata = 0x7ffd68cf57c0
retoid = 0xb <Address 0xb out of bounds>
syncUUIDs = 0x7ffd68cf57c0
len = 60
berbuf = {
   buffer = "\002\000\001", '\000' <repeats 29 times>, 
"\260\230:T\375\177\000\000\005\231:T\375\177\000\000\005\231:T\375\177", '\000' 
<repeats 34 times>, 
"i\215\064\251\375\177\000\000\000\000\000\000\000\000\000\000x\021V\251\375\177\000\000\340\022h\001", 
'\000' <repeats 36 times>, "\060S\317h\375\177\000\000Q\020", '\000' 
<repeats 14 times>, "X", '\000' <repeats 15 times>, 
"\300U\317h\375\177\000\000"..., ialign = 65538, lalign = 65538, falign 
= 9.18382988e-41, dalign = 3.2380074297143616e-319, palign = 0x10002 
<Address 0x10002 out of bounds>}
msg = 0x7ffd543f3c50
syncCookie = {ctxcsn = 0x7ffd543f3f10, sids = 0x7ffd542eb890, numcsns = 
1, rid = 2, octet_str = {bv_len = 60, bv_val = 0x7ffd5440f6d0 
"rid=002,sid=002,csn=20141129152404.971057Z#000000#001#000000"},
   sid = 2, sc_next = {stqe_next = 0x0}}
syncCookie_req = {ctxcsn = 0x7ffd5440f380, sids = 0x7ffd542ebae0, 
numcsns = 5, rid = 2, octet_str = {bv_len = 224,
     bv_val = 0x7ffd543714e0 
"rid=002,sid=004,csn=20141129152404.970764Z#000000#001#000000;20141129151341.491595Z#000000#002#000000;20141129151341.507685Z#000000#003#000000;20141129151341.523508Z#000000#004#000000;20141129151341.5"...}, 
sid = 4, sc_next = {stqe_next = 0x0}}
rc = 100
err = 0
modlist = 0x0
m = 32765
tout = {tv_sec = 0, tv_usec = 0}
refreshDeletes = 0
empty = "empty"
(gdb) p *si
$1 = {si_next = 0x1682200, si_be = 0x1680940, si_wbe = 0x1680940, si_re 
= 0x1682090, si_rid = 2, si_ridtxt = "rid=002", si_bindconf = {sb_uri = 
{bv_len = 22, bv_val = 0x16816b0 "ldap://10.2.0.1:11113/"},
     sb_version = 3, sb_tls = 0, sb_method = 128, sb_timeout_api = 10, 
sb_timeout_net = 0, sb_binddn = {bv_len = 19, bv_val = 0x1681690 
"uid=replica,dc=ldap"}, sb_cred = {bv_len = 3,
       bv_val = 0x1682110 "xyz"}, sb_saslmech = {bv_len = 0, bv_val = 
0x0}, sb_secprops = 0x0, sb_realm = {bv_len = 0, bv_val = 0x0}, 
sb_authcId = {bv_len = 0, bv_val = 0x0}, sb_authzId = {bv_len = 0,
       bv_val = 0x0}, sb_keepalive = {sk_idle = 1, sk_probes = 1, 
sk_interval = 1}, sb_tls_ctx = 0x0, sb_tls_cert = 0x0, sb_tls_key = 0x0, 
sb_tls_cacert = 0x0, sb_tls_cacertdir = 0x0,
     sb_tls_reqcert = 0x0, sb_tls_cipher_suite = 0x0, 
sb_tls_protocol_min = 0x0, sb_tls_crlcheck = 0x0, sb_tls_do_init = 0}, 
si_base = {bv_len = 15, bv_val = 0x1682030 "dc=ngdr,dc=ldap"}, 
si_logbase = {
     bv_len = 0, bv_val = 0x0}, si_filterstr = {bv_len = 15, bv_val = 
0x1681200 "(objectclass=*)"}, si_filter = 0x1682010, si_logfilterstr = 
{bv_len = 0, bv_val = 0x0}, si_contextdn = {bv_len = 7,
     bv_val = 0x16811e0 "dc=ldap"}, si_scope = 2, si_attrsonly = 0, 
si_anfile = 0x0, si_anlist = 0x1682130, si_exanlist = 0x1681fc0, 
si_attrs = 0x169f0f0, si_exattrs = 0x0, si_allattrs = 1,
   si_allopattrs = 1, si_schemachecking = 0, si_type = 3, si_ctype = 3, 
si_interval = 60, si_retryinterval = 0x1681ff0, si_retrynum_init = 
0x1682070, si_retrynum = 0x1682050, si_syncCookie = {
     ctxcsn = 0x7ffd7c1d87d0, sids = 0x7ffd54411150, numcsns = 5, rid = 
2, octet_str = {bv_len = 224,
       bv_val = 0x7ffd543f57f0 
"rid=002,sid=004,csn=20141129152404.970905Z#000000#001#000000;20141129151341.491595Z#000000#002#000000;20141129151341.507685Z#000000#003#000000;20141129151341.523508Z#000000#004#000000;20141129151341.5"...}, 
sid = 4, sc_next = {stqe_next = 0x0}}, si_cookieState = 0x1681c70, 
si_cookieAge = 1539004, si_manageDSAit = 0, si_slimit = 0, si_tlimit = 
0, si_refreshDelete = 0,
   si_refreshPresent = 1, si_refreshDone = 1, si_syncdata = 0, 
si_logstate = 0, si_got = 269715, si_strict_refresh = 0, si_too_old = 0, 
si_msgid = 2, si_presentlist = 0x7ffd7c58e050,
   si_ld = 0x7ffd7c718210, si_conn = 0x7ffda9a365d0, si_nonpresentlist = 
{lh_first = 0x0}, si_rewrite = 0x0, si_suffixm = {bv_len = 0, bv_val = 
0x0}, si_mutex = {__data = {__lock = 1, __count = 0,
       __owner = 13107, __nusers = 1, __kind = 0, __spins = 0, __elision 
= 0, __list = {__prev = 0x0, __next = 0x0}},
     __size = "\001\000\000\000\000\000\000\000\063\063\000\000\001", 
'\000' <repeats 26 times>, __align = 1}}
(gdb) p si->si_ridtxt
$2 = "rid=002"
(gdb) p (void*)si->si_ridtxt
$3 = (void *) 0x1681d24