Bug#405495: libsasl2-modules-ldap: libldapdb segfaults

[Jean Charles Delepine]

Package: libsasl2-modules-ldap
Version: 2.1.22.dfsg1-8
Severity: important


A fresh etch install, on an AMD64 xenu.

imapd.conf contains :
allowplaintext: yes
sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: ldapdb
sasl_ldapdb_uri: ldap://ldap.u-picardie.fr/
sasl_ldapdb_mech: DIGEST-MD5
sasl_ldapdb_id: mailadmin
sasl_ldapdb_pw: xxxxxxxxx
sasl_log_level: 255
sasl_auto_transition: yes

cyradm -user mailadmin localhost gives :

Jan  3 22:44:30 mailx master[6744]: set maximum file descriptors to 256/256
Jan  3 22:44:30 mailx master[6744]: about to exec /usr/lib/cyrus/bin/proxyd
Jan  3 22:44:30 mailx cyrus/imap[6744]: running external debugger: /usr/bin/gdb -batch -cd=/tmp -x /usr/lib/cyrus/get-backtrace.gdb /usr/lib/cyrus/bin/proxyd 6744 >/tmp/gdb-backtrace.cyrus.proxyd.6744 <&- 2>&1 &
Jan  3 22:44:30 mailx cyrus/imap[6744]: debugger returned exit status: 0
Jan  3 22:44:30 mailx cyrus/imap[6744]: executed
Jan  3 22:44:30 mailx cyrus/imap[6744]: telling master 2
Jan  3 22:44:30 mailx cyrus/imap[6744]: accepted connection
Jan  3 22:44:30 mailx cyrus/imap[6744]: telling master 3
Jan  3 22:44:30 mailx master[6720]: service imap pid 6744 in READY state: now unavailable and in BUSY state
Jan  3 22:44:30 mailx master[6720]: service imap pid 6744 in BUSY state: now serving connection
Jan  3 22:44:40 mailx kernel: proxyd[6744]: segfault at 0000000000000011 rip 00002ba5db536c60 rsp 00007fffd2d50580 error 4
Jan  3 22:44:40 mailx master[6720]: process 6744 exited, signaled to death by 11
Jan  3 22:44:40 mailx master[6720]: service imap pid 6744 in BUSY state: terminated abnormally

backtrace :

(no debugging symbols found)
Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 47991306763888 (LWP 6744)]
0x00002ba5d8916a85 in select () from /lib/libc.so.6

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 47991306763888 (LWP 6744)]
0x00002ba5db536c60 in pthread_mutex_lock () from /lib/libpthread.so.0
#0  0x00002ba5db536c60 in pthread_mutex_lock () from /lib/libpthread.so.0
#1  0x00002ba5db17d36e in ldap_pvt_sasl_mutex_lock ()
   from /usr/lib/libldap_r.so.2
#2  0x00002ba5dac48f12 in digestmd5_client_mech_step (conn_context=0x5f3460, 
    params=0x5f2fa0, serverin=0x0, serverinlen=0, prompt_need=0x7fffd2d507c0, 
    clientout=0x7fffd2d507a8, clientoutlen=0x7fffd2d507ec, oparams=0x5f2630)
    at digestmd5.c:3955
#3  0x00002ba5d7e6e5c2 in sasl_client_step (conn=0x5f1dc0, 
    serverin=0x7fffd2d507ec "", serverinlen=3679677520, prompt_need=0x1, 
    clientout=0x7fffd2d507a8, clientoutlen=0x7fffd2d507ec) at client.c:658
#4  0x00002ba5d7e6ea6e in sasl_client_start (conn=0x5f1dc0, 
    mechlist=0x5e1e80 "DIGEST-MD5", prompt_need=0x7fffd2d507c0, 
    clientout=0x7fffd2d507a8, clientoutlen=0x7fffd2d507ec, mech=0x7fffd2d507d0)
    at client.c:606
#5  0x00002ba5db17d902 in ldap_int_sasl_bind () from /usr/lib/libldap_r.so.2
#6  0x00002ba5db17f4d9 in ldap_sasl_interactive_bind_s ()
   from /usr/lib/libldap_r.so.2
#7  0x00002ba5db0639f9 in ldapdb_connect (ctx=0x5eb540, sparams=0x5e4a50, 
    user=0x5ef8a1 "mailadmin", ulen=9, cp=0x7fffd2d50950) at ldapdb.c:106
#8  0x00002ba5db063f71 in ldapdb_auxprop_lookup (glob_context=0x5eb540, 
    sparams=0x5e4a50, flags=0, user=0x5ef8a1 "mailadmin", ulen=9)
    at ldapdb.c:178
#9  0x00002ba5d7e6b144 in _sasl_auxprop_lookup (sparams=0x5e4a50, flags=0, 
    user=0x5ef8a1 "mailadmin", ulen=9) at auxprop.c:898
#10 0x00002ba5d7e6c817 in _sasl_canon_user (conn=0x5eeb00, 
    user=0x5ef8a1 "mailadmin", ulen=9, flags=1, oparams=0x5ef370)
    at canonusr.c:190
#11 0x00002ba5dac4a515 in digestmd5_server_mech_step2 (stext=0x5f09a0, 
    sparams=0x5e4a50, clientin=<value optimized out>, 
    clientinlen=<value optimized out>, serverout=0x7fffd2d56c60, 
    serveroutlen=0x7fffd2d56c68, oparams=0x5ef370) at digestmd5.c:2301
#12 0x00002ba5dac4b7a9 in digestmd5_server_mech_step (conn_context=0x5f09a0, 
    sparams=0x5e4a50, clientin=0x7fffd2d507ec "", clientinlen=1, 
    serverout=0x1, serveroutlen=0x1a58, oparams=0x5ef370) at digestmd5.c:2689
#13 0x00002ba5d7e75024 in sasl_server_step (conn=0x5eeb00, 
    clientin=0x7fffd2d51700 "username=\"mailadmin\",realm=\"mailx\",nonce=\"Q/tyrXCdhoIPY7eZXfHeuNAVZeknri/WAUIvLZ7gjjM=\",cnonce=\"DSD42ndcQCZQkWBv/bHquOAVgVe2JeHW2iNX8YeOB8k=\",nc=00000001,qop=auth-conf,cipher=rc4,maxbuf=4096,digest-ur"..., clientinlen=3679677520, serverout=0x7fffd2d56c60, serveroutlen=0x1a58)
    at server.c:1433
#14 0x0000000000421b88 in mboxlist_findall ()
#15 0x000000000041134f in annotate_fetch_proxy ()
#16 0x00000000004139f8 in annotate_fetch_proxy ()
#17 0x0000000000413f5c in annotate_fetch_proxy ()
#18 0x0000000000407051 in ?? ()
#19 0x00002ba5d88704ca in __libc_start_main () from /lib/libc.so.6
#20 0x00000000004067fa in ?? ()
#21 0x00007fffd2d596f8 in ?? ()
#22 0x0000000000000000 in ?? ()



-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-xen-amd64
Locale: LANG=fr_FR, LC_CTYPE=fr_FR (charmap=ISO-8859-1)

Versions of packages libsasl2-modules-ldap depends on:
ii  libc6                     2.3.6.ds1-8    GNU C Library: Shared libraries
ii  libldap2                  2.1.30-13.2    OpenLDAP libraries
ii  libsasl2-modules          2.1.22.dfsg1-8 Pluggable Authentication Modules f

libsasl2-modules-ldap recommends no packages.

-- no debconf information