[Pkg-openldap-devel] Bug#428468: Bug#428468: Two bugs

[Brian May]

>>>>> "Brian" == Brian May <bam at snoopy.debian.net> writes:

    Brian> Another theory I have had is that something is broken in
    Brian> GNU TLS.

    Brian> Is it possible to rebuild the Debian package of openldap
    Brian> 2.1 against openssl instead or is this likely to be
    Brian> complicated?

Oh wait, I have done it.

Now the programs works perfectly and then always segment fault on exit
:-(

(regardless of what I search for)

At least it is better then what it was before... I suspect this
problem is different to before. Maybe because the Debian package has
patches that prevent it working properly with openssl?

So the original problem looks very much like a bug in the GNU TLS
libraries too me.

(I also reproduced the previous problem under unstable)

=== cut ===
brian at sys11:~/tmp/debian/other/openldap2-2.1.30/debian/build/clients/tools$ ldd .libs/ldapsearch  
                                                                            linux-gate.so.1 =>  (0xb7fc5000)
                                                                            libldap.so.2 => /usr/lib/libldap.so.2 (0xb7f7b000)
                                                                            liblber.so.2 => /usr/lib/liblber.so.2 (0xb7f6e000)
                                                                            libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0xb7f58000)
                                                                            libssl.so.0.9.8 => /usr/lib/i686/cmov/libssl.so.0.9.8 (0xb7f19000)
                                                                            libcrypto.so.0.9.8 => /usr/lib/i686/cmov/libcrypto.so.0.9.8 (0xb7ddf000)
                                                                            libcrypt.so.1 => /lib/tls/i686/cmov/libcrypt.so.1 (0xb7db1000)
                                                                            libresolv.so.2 => /lib/tls/i686/cmov/libresolv.so.2 (0xb7d9e000)
                                                                            libdl.so.2 => /lib/tls/i686/cmov/libdl.so.2 (0xb7d99000)
                                                                            libc.so.6 => /lib/tls/i686/cmov/libc.so.6 (0xb7c65000)
                                                                            libpthread.so.0 => /lib/tls/i686/cmov/libpthread.so.0 (0xb7c52000)
                                                                            libz.so.1 => /usr/lib/libz.so.1 (0xb7c3e000)
                                                                            /lib/ld-linux.so.2 (0xb7fc6000)
brian at sys11:~/tmp/debian/other/openldap2-2.1.30/debian/build/clients/tools$ gdb .libs/ldapsearch 
GNU gdb 6.4.90-debian
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".

(gdb) set args -H ldaps://sam.in.vpac.org/ -x  uid=none
(gdb) r
Starting program: /home/brian/tmp/debian/other/openldap2-2.1.30/debian/build/clients/tools/.libs/ldapsearch -H ldaps://sam.in.vpac.org/ -x  uid=none
[Thread debugging using libthread_db enabled]
[New Thread -1212426560 (LWP 24576)]
# extended LDIF
#
# LDAPv3
# base <> with scope sub
# filter: uid=none
# requesting: ALL
#

# search result
search: 2
result: 0 Success

# numResponses: 1

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1212426560 (LWP 24576)]
0xb7df43ee in BUF_MEM_free () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
(gdb) bt
#0  0xb7df43ee in BUF_MEM_free () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
#1  0xb7e182d2 in d2i_X509_ATTRIBUTE () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
#2  0xb7e1f195 in ASN1_primitive_free () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
#3  0xb7e1f356 in ASN1_template_free () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
#4  0xb7e1f262 in ASN1_primitive_free () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
#5  0xb7e1f356 in ASN1_template_free () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
#6  0xb7e1f262 in ASN1_primitive_free () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
#7  0xb7e1f393 in ASN1_item_free () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
#8  0xb7e18ae7 in X509_free () from /usr/lib/i686/cmov/libcrypto.so.0.9.8
#9  0xb7ec6ab1 in ssl_cert_free () from /usr/lib/i686/cmov/libssl.so.0.9.8
#10 0xb7ec53ca in SSL_free () from /usr/lib/i686/cmov/libssl.so.0.9.8
#11 0xb7f272df in ldap_pvt_tls_get_option () from /usr/lib/libldap.so.2
#12 0xb7ef8df0 in ber_sockbuf_remove_io () from /usr/lib/liblber.so.2
#13 0xb7ef8eaa in ber_int_sb_destroy () from /usr/lib/liblber.so.2
#14 0xb7ef8f54 in ber_sockbuf_free () from /usr/lib/liblber.so.2
#15 0xb7f10e77 in ldap_ld_free () from /usr/lib/libldap.so.2
#16 0xb7f10ee7 in ldap_unbind_ext () from /usr/lib/libldap.so.2
#17 0xb7f10fe6 in ldap_unbind () from /usr/lib/libldap.so.2
#18 0x0804b256 in main (argc=1474660693, argv=0xec835356)
    at /home/brian/tmp/debian/other/openldap2-2.1.30/clients/tools/ldapsearch.c:917
(gdb) 
=== cut ===
-- 
Brian May <bam at snoopy.debian.net>