[Pkg-openldap-devel] Bug#770703: slapd segfault with memberof overlay on frontend db

[Florian Mutter]

Package: slapd
Version: 2.4.31-1+nmu2
Severity: important

Dear Maintainer,
when adding someone to a group and the memberOf overlay is activated in the
frontend slapd crashes with the following stacktrace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f5e6be4e700 (LWP 16374)]
0x00007f5e7307428c in over_op_func (op=0x7f5e6be4bf90, rs=0x7f5e6be4bdb0,
    which=op_aux_chk_controls)
    at ../../../../servers/slapd/backover.c:704
704     ../../../../servers/slapd/backover.c: No such file or directory.
(gdb) bt
#0  0x00007f5e7307428c in over_op_func (op=0x7f5e6be4bf90, rs=0x7f5e6be4bdb0,
    which=op_aux_chk_controls)
    at ../../../../servers/slapd/backover.c:704
#1  0x00007f5e73014df9 in backend_check_restrictions (op=op at entry=0x7f5e6be4bf90,
    rs=rs at entry=0x7f5e6be4bdb0, opdata=opdata at entry=0x0) 
    at ../../../../servers/slapd/backend.c:1042
#2  0x00007f5e7301e3af in fe_op_modify (op=0x7f5e6be4bf90, rs=0x7f5e6be4bdb0)
    at ../../../../servers/slapd/modify.c:252
#3  0x00007f5e730741c6 in overlay_op_walk (op=op at entry=0x7f5e6be4bf90,
    rs=0x7f5e6be4bdb0, which=op_modify, oi=0x7f5e73cd6b90, on=0x0)
    at ../../../../servers/slapd/backover.c:671
#4  0x00007f5e7307431b in over_op_func (op=0x7f5e6be4bf90, rs=<optimized out>,
    which=<optimized out>)
    at ../../../../servers/slapd/backover.c:723
#5  0x00007f5e7301e569 in fe_op_modify (op=0x7f5e6be4bf90, rs=0x7f5e6be4bdb0)
    at ../../../../servers/slapd/modify.c:303
#6  0x00007f5e730741c6 in overlay_op_walk (op=op at entry=0x7f5e6be4bf90,
    rs=0x7f5e6be4bdb0, which=op_modify, oi=0x7f5e73cd6b90, on=0x0)
    at ../../../../servers/slapd/backover.c:671
#7  0x00007f5e7307431b in over_op_func (op=0x7f5e6be4bf90, rs=<optimized out>,
    which=<optimized out>)
    at ../../../../servers/slapd/backover.c:723

The last 3 rows are repeated several times (seems to be an endless recursion or
something.

The upstream bug seems to be http://www.openldap.org/its/index.cgi/Incoming?id=7249
but I'm not sure whether its fixed or not.

My frontend configuration looks like this:

version: 1

dn: olcDatabase={-1}frontend,cn=config
objectClass: olcFrontendConfig
objectClass: olcDatabaseConfig
olcDatabase: {-1}frontend
olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=extern
 al,cn=auth manage by * break
olcAccess: {1}to dn.exact="" by * read
olcAccess: {2}to dn.base="cn=Subschema" by * read
olcAddContentAcl: FALSE
olcLastMod: TRUE
olcMaxDerefDepth: 0
olcMonitoring: FALSE
olcReadOnly: FALSE
olcSchemaDN: cn=Subschema
olcSyncUseSubentry: FALSE

dn: olcOverlay={0}memberof,olcDatabase={-1}frontend,cn=config
objectClass: olcMemberOf
objectClass: olcOverlayConfig
olcOverlay: {0}memberof
olcMemberOfDangling: ignore
olcMemberOfGroupOC: groupOfNames
olcMemberOfMemberAD: member
olcMemberOfMemberOfAD: memberOf
olcMemberOfRefInt: FALSE

-- System Information:
Debian Release: 7.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages slapd depends on:
ii  adduser                     3.113+nmu3
ii  coreutils                   8.13-3.5
ii  debconf [debconf-2.0]       1.5.49
ii  libc6                       2.13-38+deb7u6
ii  libdb5.1                    5.1.29-5
ii  libgcrypt11                 1.5.0-5+deb7u2
ii  libgnutls26                 2.12.20-8+deb7u2
ii  libldap-2.4-2               2.4.31-1+nmu2
ii  libltdl7                    2.4.2-1.1
ii  libodbc1                    2.2.14p2-5
ii  libperl5.14                 5.14.2-21+deb7u2
ii  libsasl2-2                  2.1.25.dfsg1-6+deb7u1
ii  libslp1                     1.2.1-9
ii  libwrap0                    7.6.q-24
ii  lsb-base                    4.1+Debian8+deb7u1
ii  multiarch-support           2.13-38+deb7u6
ii  perl [libmime-base64-perl]  5.14.2-21+deb7u2
ii  psmisc                      22.19-1+deb7u1

Versions of packages slapd recommends:
ii  libsasl2-modules  2.1.25.dfsg1-6+deb7u1

Versions of packages slapd suggests:
pn  ldap-utils  <none>

-- debconf information:
  slapd/password_mismatch:
  slapd/invalid_config: true
  shared/organization: skweez.net
  slapd/upgrade_slapcat_failure:
  slapd/backend: HDB
  slapd/dump_database: when needed
  slapd/allow_ldap_v2: false
  slapd/no_configuration: false
  slapd/move_old_database: true
  slapd/dump_database_destdir: /var/backups/slapd-VERSION
  slapd/purge_database: false
  slapd/domain: skweez.net