This doesn't occur with back-bdb/hdb, and it doesn't happen if I insert a
sleep after the ldapsearch to see if slapd is running, before the
modification to cn=config is done.
Thread 3 "lt-slapd" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fae46748700 (LWP 11239)]
0x00007fae4553abab in syncprov_free_syncop (so=0x7fae3c102cc0, unlink=1) at
syncprov.c:811
811 for ( sop = &so->s_si->si_ops; *sop; sop =
&(*sop)->s_next ) {
Here's the full backtrace:
Thread 4 (Thread 0x7fae45f47700 (LWP 11240)):
#0 pthread_cond_wait@@GLIBC_2.3.2 () at
../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
No locals.
#1 0x00007fae4b48af69 in ldap_pvt_thread_cond_wait (cond=0x2529138,
mutex=0x2529110) at thr_posix.c:281
No locals.
#2 0x00007fae4b4896e5 in ldap_int_thread_pool_wrapper (xpool=0x2529100) at
tpool.c:945
pq = 0x2529100
pool = 0x2529000
task = 0x0
work_list = 0x2529170
ctx = {ltu_pq = 0x2529100, ltu_id = 140386474686208, ltu_key =
{{ltk_key = 0x440674 <conn_counter_init+224>, ltk_data = 0x7fae3c000db0,
ltk_free = 0x4404c5 <conn_counter_destroy+224>}, {ltk_key =
0x4bc7fd <slap_sl_mem_create+197>, ltk_data = 0x7fae3c000ec0, ltk_free =
0x4bc621 <slap_sl_mem_destroy+224>}, {
ltk_key = 0x45d2c1 <slap_op_free+224>, ltk_data =
0x7fae3c000950, ltk_free = 0x45d212 <slap_op_free+49>}, {ltk_key = 0x0,
ltk_data = 0x7fae38108550, ltk_free = 0x0}, {
ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0x0} <repeats 28
times>}}
kctx = 0x0
i = 32
keyslot = 349
hash = 3903429981
pool_lock = 0
freeme = 0
__PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper"
#3 0x00007fae4ae496ba in start_thread (arg=0x7fae45f47700) at
pthread_create.c:333
__res = <optimized out>
pd = 0x7fae45f47700
now = <optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140386474686208,
8789157664068107475, 0, 140386491460639, 140386474686912, 0,
-8744345895670219565, -8744361424428172077},
mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0},
data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
not_first_call = <optimized out>
pagesize_m1 = <optimized out>
sp = <optimized out>
freesize = <optimized out>
__PRETTY_FUNCTION__ = "start_thread"
#4 0x00007fae4a23f82d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:109
No locals.
Thread 3 (Thread 0x7fae46748700 (LWP 11239)):
#0 0x00007fae4553abab in syncprov_free_syncop (so=0x7fae3c102cc0,
unlink=1) at syncprov.c:811
sop = 0x6f637d307b3d6573
sr = 0x0
srnext = 0x240907c38f1c2800
ga = 0x0
gnext = 0x7fae46747960
#1 0x00007fae4553b6ec in syncprov_qtask (ctx=0x7fae46747c30,
arg=0x7fae3c102cc0) at syncprov.c:1005
so = 0x7fae3c102cc0
opbuf = {ob_op = {o_hdr = 0x7fae46747960, o_tag = 99, o_time =
1492715516, o_tincr = 0, o_tusec = 0, o_qtime = {tv_sec = 0, tv_usec = 0},
o_bd = 0x7fae46747650, o_req_dn = {
bv_len = 9, bv_val = 0x7fae3c103032 "cn=config"}, o_req_ndn =
{bv_len = 9, bv_val = 0x7fae3c10303c "cn=config"}, o_request = {oq_add =
{rs_modlist = 0x2,
rs_e = 0xffffffffffffffff}, oq_bind = {rb_method = 2,
rb_cred = {bv_len = 18446744073709551615, bv_val = 0x0}, rb_edn = {bv_len =
0, bv_val = 0x0}, rb_ssf = 1007690928,
rb_mech = {bv_len = 15, bv_val = 0x7fae3c103046
"(objectClass=*)"}}, oq_compare = {rs_ava = 0x2}, oq_modify = {rs_mods =
{rs_modlist = 0x2, rs_no_opattrs = -1 '\377'},
rs_increment = 0}, oq_modrdn = {rs_mods = {rs_modlist =
0x2, rs_no_opattrs = -1 '\377'}, rs_deleteoldrdn = 0, rs_newrdn = {bv_len =
0, bv_val = 0x0}, rs_nnewrdn = {
bv_len = 140386308727984, bv_val = 0xf <error: Cannot
access memory at address 0xf>}, rs_newSup = 0x7fae3c103046, rs_nnewSup =
0x0}, oq_search = {rs_scope = 2,
rs_deref = 0, rs_slimit = -1, rs_tlimit = -1, rs_limit =
0x0, rs_attrsonly = 0, rs_attrs = 0x0, rs_filter = 0x7fae3c1024b0,
rs_filterstr = {bv_len = 15,
bv_val = 0x7fae3c103046 "(objectClass=*)"}}, oq_abandon =
{rs_msgid = 2}, oq_cancel = {rs_msgid = 2}, oq_extended = {rs_reqoid =
{bv_len = 2,
bv_val = 0xffffffffffffffff <error: Cannot access memory
at address 0xffffffffffffffff>}, rs_flags = 0, rs_reqdata = 0x0},
oq_pwdexop = {rs_extended = {rs_reqoid = {
bv_len = 2, bv_val = 0xffffffffffffffff <error: Cannot
access memory at address 0xffffffffffffffff>}, rs_flags = 0, rs_reqdata =
0x0}, rs_old = {bv_len = 0,
bv_val = 0x7fae3c1024b0 "\207"}, rs_new = {bv_len = 15,
bv_val = 0x7fae3c103046 "(objectClass=*)"}, rs_mods = 0x0, rs_modtail =
0x0}}, o_abandon = 0, o_cancel = 0,
o_groups = 0x0, o_do_not_cache = 1 '\001', o_is_auth_check = 0
'\000', o_dont_replicate = 0 '\000', o_acl_priv = ACL_NONE, o_nocaching = 0
'\000',
o_delete_glue_parent = 0 '\000', o_no_schema_check = 0 '\000',
o_no_subordinate_glue = 0 '\000',
o_ctrlflag = '\000' <repeats 20 times>,
"\001\000\000\000\000\000\000\000\000\000\000", o_controls =
0x7fae46747aa8, o_authz = {sai_method = 128, sai_mech = {bv_len = 0,
bv_val = 0x0}, sai_dn = {bv_len = 9, bv_val =
0x7fae3c103028 "cn=config"}, sai_ndn = {bv_len = 9, bv_val = 0x7fae3c103028
"cn=config"}, sai_ssf = 0, sai_transport_ssf = 0,
sai_tls_ssf = 0, sai_sasl_ssf = 0}, o_ber = 0x0, o_res_ber =
0x0, o_callback = 0x0, o_ctrls = 0x0, o_csn = {bv_len = 0, bv_val = 0x0},
o_private = 0x0, o_extra = {
slh_first = 0x0}, o_next = {stqe_next = 0x0}}, ob_hdr =
{oh_opid = 1, oh_connid = 1003, oh_conn = 0x257ad10, oh_msgid = 2,
oh_protocol = 3, oh_tid = 140386474686208,
oh_threadctx = 0x7fae46747c30, oh_tmpmemctx = 0x7fae38002bb0,
oh_tmpmfuncs = 0x773b20 <slap_sl_mfuncs>, oh_counters = 0x7fae3c000db0,
oh_log_prefix = "conn=1003 op=1", '\000' <repeats 241 times>},
ob_controls = {0x0 <repeats 32 times>}}
op = 0x7fae467477e0
be = {bd_info = 0x76eec0 <slap_binfo>, bd_self = 0x254c6c0,
be_ctrls = '\000' <repeats 15 times>, "\001", '\000' <repeats 16 times>,
"\001", be_flags = 131328, be_restrictops = 0,
be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0,
sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0,
sss_update_tls = 0, sss_update_sasl = 0,
sss_simple_bind = 0}, be_suffix = 0x254c8c0, be_nsuffix =
0x254c910, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len
= 0, bv_val = 0x0}, be_rootdn = {
bv_len = 9, bv_val = 0x254c860 "cn=config"}, be_rootndn =
{bv_len = 9, bv_val = 0x254c880 "cn=config"}, be_rootpw = {bv_len = 8,
bv_val = 0x254cad0 "yE1UpCg5"},
be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600,
lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1,
lms_s_pr = 0, lms_s_pr_hide = 0,
lms_s_pr_total = 0}, be_limits = 0x0, be_acl = 0x2633600,
be_dfltaccess = ACL_NONE, be_extra_anlist = 0x0, be_update_ndn = {bv_len =
0, bv_val = 0x0}, be_update_refs = 0x0,
be_pending_csn_list = 0x26335e0, be_pcl_mutex = {__data = {__lock
= 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0,
__elision = 0, __list = {__prev = 0x0,
__next = 0x0}}, __size = '\000' <repeats 39 times>, __align
= 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0x0, be_private =
0x774880 <cfBackInfo>, be_next = {
stqe_next = 0x0}}
rc = 0
#2 0x00007fae4b4897f9 in ldap_int_thread_pool_wrapper (xpool=0x2529100) at
tpool.c:963
pq = 0x2529100
pool = 0x2529000
task = 0x7fae400008c0
work_list = 0x2529170
ctx = {ltu_pq = 0x2529100, ltu_id = 140386483078912, ltu_key =
{{ltk_key = 0x440674 <conn_counter_init+224>, ltk_data = 0x7fae38002aa0,
ltk_free = 0x4404c5 <conn_counter_destroy+224>}, {ltk_key =
0x4bc7fd <slap_sl_mem_create+197>, ltk_data = 0x7fae38002bb0, ltk_free =
0x4bc621 <slap_sl_mem_destroy+224>}, {
ltk_key = 0x45d2c1 <slap_op_free+224>, ltk_data =
0x7fae38002670, ltk_free = 0x45d212 <slap_op_free+49>}, {ltk_key = 0x0,
ltk_data = 0x7fae3c101040, ltk_free = 0x0}, {
ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0x0} <repeats 28
times>}}
kctx = 0x0
i = 32
keyslot = 494
hash = 3805260270
pool_lock = 0
freeme = 0
__PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper"
#3 0x00007fae4ae496ba in start_thread (arg=0x7fae46748700) at
pthread_create.c:333
__res = <optimized out>
pd = 0x7fae46748700
now = <optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140386483078912,
8789157664068107475, 0, 140386491460639, 140386483079616, 0,
-8744353591714743085, -8744361424428172077},
mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0},
data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
not_first_call = <optimized out>
pagesize_m1 = <optimized out>
sp = <optimized out>
freesize = <optimized out>
__PRETTY_FUNCTION__ = "start_thread"
#4 0x00007fae4a23f82d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:109
No locals.
Thread 2 (Thread 0x7fae46f49700 (LWP 11211)):
#0 0x00007fae4a23fe23 in epoll_wait () at
../sysdeps/unix/syscall-template.S:84
No locals.
#1 0x000000000043c6ac in slapd_daemon_task (ptr=0x2737b40) at daemon.c:2527
err = 4
ns = 1
at = 0
nfds = 2
revents = 0x24fccc0
tvp = 0x0
cat = {tv_sec = 0, tv_usec = 0}
i = 1
nwriters = 0
now = 1492715518
tv = {tv_sec = 0, tv_usec = 0}
tdelta = 1
rtask = 0x0
l = 1
last_idle_check = 1492715506
ebadf = 0
tid = 0
#2 0x00007fae4ae496ba in start_thread (arg=0x7fae46f49700) at
pthread_create.c:333
__res = <optimized out>
pd = 0x7fae46f49700
now = <optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140386491471616,
8789157664068107475, 0, 140720937019743, 140386491472320, 0,
-8744352491666244397, -8744361424428172077},
mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0},
data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
not_first_call = <optimized out>
pagesize_m1 = <optimized out>
sp = <optimized out>
freesize = <optimized out>
__PRETTY_FUNCTION__ = "start_thread"
#3 0x00007fae4a23f82d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:109
No locals.
Thread 1 (Thread 0x7fae4b8f8700 (LWP 11196)):
#0 0x00007fae4ae4a98d in pthread_join (threadid=140386491471616,
thread_return=0x0) at pthread_join.c:90
__tid = 17259
_buffer = {__routine = 0x7fae4ae4a8b0 <cleanup>, __arg =
0x7fae46f49d28, __canceltype = 0, __prev = 0x0}
oldtype = 0
pd = 0x7fae46f49700
self = 0x7fae4b8f8700
result = 0
#1 0x00007fae4b48aeaa in ldap_pvt_thread_join (thread=140386491471616,
thread_return=0x0) at thr_posix.c:201
No locals.
#2 0x000000000043d949 in slap_sig_wake (sig=0) at daemon.c:3012
save_errno = 0
#3 0x0000000000415e5f in main (argc=8, argv=0x7ffc2576ac68) at main.c:1058
i = -1
no_detach = 1
rc = -12
urls = 0x24f80b0 "ldap://localhost:9011/";
username = 0x0
groupname = 0x0
sandbox = 0x0
syslogUser = 160
pid = 16711680
waitfds = {5294400, 0}
g_argc = 8
g_argv = 0x7ffc2576ac68
configfile = 0x0
configdir = 0x24f8090 "./slapd.d"
serverName = 0x7ffc2576b51a "lt-slapd"
serverMode = 1
scp = 0x0
scp_entry = 0x0
debug_unknowns = 0x0
syslog_unknowns = 0x0
serverNamePrefix = 0x50ce18 ""
l = 0
slapd_pid_file_unlink = 0
slapd_args_file_unlink = 0
firstopt = 0
__PRETTY_FUNCTION__ = "\000\000\000\000"
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
