[Pkg-openldap-devel] Bug#458830: slapd: slapcat failure on x86_32|64

[Richard A Nelson]

Package: slapd
Version: 2.3.39-1
Severity: important

I've been running the same setup for a while - a master (x86_64) and two
syncrepl clients (x86_32):  After some recent updates to the system,
I discovered this failure on both x86_(32|64)...  It prevents package
updates from working, and destroys the ability to backup the local
databases.

$slapcat -b'dc=cobpli,dc=svl,dc=ibm,dc=com' -f /etc/ldap/ldif/slapcat.ldif
...
filter_free: unknown filter type=48
*** glibc detected *** slapcat: double free or corruption (out):
0x00000000007a0e80 ***
======= Backtrace: =========
/lib/libc.so.6[0x2b632376afca]
/lib/libc.so.6(cfree+0x8c)[0x2b632376eb5c]
slapcat(filter_free+0x3b)[0x42f48b]
slapcat(acl_free+0x14)[0x44c1f4]
slapcat(acl_destroy+0x1f)[0x44c34f]
slapcat(backend_destroy_one+0x175)[0x4368c5]
slapcat(backend_destroy+0x1a)[0x43696a]
slapcat(slap_destroy+0x41)[0x4518d1]
slapcat(slap_tool_destroy+0x1d)[0x47e67d]
slapcat(slapcat+0x29c)[0x47e62c]
slapcat(main+0xa4)[0x417de4]
/lib/libc.so.6(__libc_start_main+0xf4)[0x2b63237151c4]
slapcat[0x417a29]

After much digging, I discovered the culprit:
$cat /etc/ldap/fwd.ibm_bluepages
database ldap
suffix "ou=bluepages,o=ibm.com"
directory /var/lib/ldap/bluepages
...
#
# Allow anyone to read the data locally
access to
    dn.subtree="ou=bluepages,o=ibm.com"
    by * read
...
# Cache the most common request form locally for improved performance
overlay       pcache
proxycache    bdb 10000 1 50 100
proxyattrset  0 mail 
proxytemplate (&(objectClass=)(mail=)) 0 86400
directory     /var/lib/ldap/bluepages

Commenting out the pcache overlay related entries does allow the slapcat
to continue...  I think, but can not ensure that I've run slapcat since
adding the pcache overlay.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing-proposed-updates
  APT policy: (500, 'testing-proposed-updates'), (500, 'proposed-updates'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.23.11 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages slapd depends on:
ii  adduser                  3.105           add and remove users and groups
ii  coreutils                5.97-5.6        The GNU core utilities
ii  debconf [debconf-2.0]    1.5.17          Debian configuration management sy
ii  libc6                    2.7-5           GNU C Library: Shared libraries
ii  libdb4.2                 4.2.52+dfsg-4   Berkeley v4.2 Database Libraries [
ii  libiodbc2                3.52.6-1        iODBC Driver Manager
ii  libldap-2.3-0            2.3.39-1        OpenLDAP libraries
ii  libltdl3                 1.5.24-2        A system independent dlopen wrappe
ii  libperl5.8               5.8.8-12        Shared Perl library
ii  libsasl2-2               2.1.22.dfsg1-16 Cyrus SASL - authentication abstra
ii  libslp1                  1.2.1-7.1       OpenSLP libraries
ii  libssl0.9.8              0.9.8g-3        SSL shared libraries
ii  libwrap0                 7.6.dbs-14      Wietse Venema's TCP wrappers libra
ii  perl [libmime-base64-per 5.8.8-12        Larry Wall's Practical Extraction 
ii  psmisc                   22.6-1          Utilities that use the proc filesy

Versions of packages slapd recommends:
ii  libsasl2-modules         2.1.22.dfsg1-16 Cyrus SASL - pluggable authenticat

-- debconf information excluded