https://bugs.openldap.org/show_bug.cgi?id=6916

--- Comment #14 from Mehmet gelisin <[email protected]> ---
the following Syncprov overlay configuration:

dn: olcOverlay={0}syncprov,olcDatabase={2}mdb,cn=config
objectClass: olcSyncProvConfig
objectClass: olcOverlayConfig http://www-look-4.com/ 
olcOverlay: {0}syncprov
olcSpCheckpoint: 100 10


 http://www.compilatori.com/ 
You can crash slapd with the following modification as the cn=config rootdn:

dn: olcOverlay={0}syncprov,olcDatabase={2}mdb,cn=config
changetype: modify
replace: olcSpSessionlog http://www.wearelondonmade.com/ 
olcSpSessionlog: 10000


GDB backtrace shows: http://www.jopspeech.com/ 

#0  0x00007f7b43f8b954 in sp_cf_gen (c=0x7f7b0761b450) at syncprov.c:3164
        on = 0x55d6fb385b90
        si = 0x55d6fb35c700
        rc = 0 http://joerg.li/ 
#1  0x000055d6fa4da4ec in config_modify_internal (ca=0x7f7b0761b450,
rs=<optimized out>, op=<optimized out>, ce=<optimized out>) at bconfig.c:5773
        vals = 0x7f7af8002680
        nvals = 0x0
        d = <optimized out> http://connstr.net/ 
        e = 0x55d6fb335a38
        save_attrs = 0x55d6fb349498
        a = 0x55d6fb350180
        i = <optimized out>
        dels = 0x0 
        rc = <optimized out> http://embermanchester.uk/ 
        oc_at = <optimized out>
        ct = 0x7f7b441970e0 <spcfg+64>
        nocs = 3
        ptr = <optimized out>
        s = 0x0
        deltail = 0x0
        ml = 0x7f7af8102cd0 http://www.slipstone.co.uk/ 
#2  config_back_modify (op=<optimized out>, rs=<optimized out>) at
bconfig.c:5943
        cfb = <optimized out>
        ce = <optimized out>
        last = 0x55d6fb387f30
        ml = <optimized out> http://www.logoarts.co.uk/ 
        ca = {argc = 1, argv = 0x7f7af8103610, argv_size = 513, line = 0x0,
tline = 0x0, fname = 0x55d6fa5f5a91 "slapd", lineno = 0,
          log = "olcSpSessionlog: value #0", '\000' <repeats 4098 times>, reply
= {err = 0,
   http://www.acpirateradio.co.uk/           msg = "modify/delete:
olcSpSessionlog: no such attribute", '\000' <repeats 206 times>}, depth = 0,
valx = -1, values = {v_int = 10000, v_uint = 10000,
            v_long = 10000, v_ulong = 10000, v_ber_t = 10000, v_string = 0x2710
<Address 0x2710 out of bounds>, v_bv = {bv_len https://waytowhatsnext.com/  =
10000, bv_val = 0x0}, v_dn = {vdn_dn = {
                bv_len = 10000, bv_val = 0x0}, vdn_ndn = {bv_len = 0, bv_val =
0x0}}, v_ad = 0x2710}, rvalue_vals = 0x0, rvalue_nvals = 0x0, op = 1, type = 2,
    https://www.webb-dev.co.uk/        ca_op = 0x7f7af80028f0, be =
0x55d6fb35c880, bi = 0x55d6fb385b90, ca_entry = 0x55d6fb335a38, ca_private =
0x0, cleanup = 0x0, table = Cft_Overlay}
        rdn = {bv_len = 10, bv_val = 0x55d6fb385d70
"olcOverlay={0}syncprov,olcDatabase={2}mdb,cn=config"}
        ptr = <optimized out>
        rad = 0x55d6fb31a570
        do_pause = <optimized out>
#3  0x000055d6fa508b89 in fe_op_modify (op=0x7f7af80028f0, rs=0x7f7b0761d860)
at modify.c:303 http://www.iu-bloomington.com/ 
        update = <optimized out>
        repl_user = <optimized out>
        op_be = <optimized out>
        bd = 0x55d6fa87da80 <slap_frontendDB>

-- 
You are receiving this mail because:
You are on the CC list for the issue.

Reply via email to