ptloader segfaulting while looking up LDAP groups

[Ben Poliakoff]

* Ben Poliakoff <benp at reed.edu> [20060809 09:53]:
> * Igor Brezac <igor at ipass.net> [20060809 07:39]:
> > 
> > 
> > On Tue, 8 Aug 2006, Ben Poliakoff wrote:
> > 
> > >ptloader is segfaulting on multiple servers in my test environment when
> > >the user that is connecting for IMAP service is found in more than one
> > >group.
> > >
> > >I have a core file, but it doesn't seem that useful since a number of
> > >the libraries that ptloader links to don't currently have debugging
> > >symbols...
> > 
> > Can you provide backtrace?
> > 
> 
> Yes, here's a backtrace...
> 
> Core was generated by `ptloader'.
> Program terminated with signal 11, Segmentation fault.
> ...
> #0  0x00002b180d157c00 in strlen () from /lib/libc.so.6
> (gdb) bt
> #0  0x00002b180d157c00 in strlen () from /lib/libc.so.6
> #1  0x00000000004079f7 in ptsmodule_make_authstate_filter (canon_id=0x0,
>     size=0, reply=0x6e, dsize=0x1, newstate=0x7fff9e958860) at
> ldap.c:1070
> #2  0x0000000000407de6 in myauthstate (identifier=0x0, size=4,
>     reply=0x7fff9e9588d8, dsize=0x7fff9e9588e4) at ldap.c:1217
> #3  0x000000000040590a in ptsmodule_make_authstate (
>     identifier=0x7fff9e9588f0 "benp", size=4, reply=0x7fff9e9588d8,
>     dsize=0x7fff9e9588e4) at ptloader.c:120
> #4  0x0000000000405b60 in service_main_fd (c=7, argc=4, argv=0x5db69c,
>     envp=0x0) at ptloader.c:235
> #5  0x000000000040821a in main (argc=6099056, argv=0x7fff9e959258,
>     envp=0x7fff9e959268) at service-thread.c:304
> 

And here are the last few lines from an strace of the ptloader process:

22009 uname({sys="Linux", node="imap-3", ...}) = 0
22009 time(NULL)                        = 1155079054
22009 write(8, "0\f\2\1\1`\7\2\1\3\4\0\200\0", 14) = 14
22009 select(256, [8], [], NULL, NULL)  = 1 (in [8])
22009 read(8, "0\f\2\1\1a\7\n", 8)      = 8
22009 read(8, "\1\0\4\0\4\0", 6)        = 6
22009 time(NULL)                        = 1155079054
22009 time(NULL)                        = 1155079054
22009 write(8, "03\2\1\2c.\4\16dc=example,dc=com\n\1\2\n\1\0\2\1\n"..., 53)
= 53
22009 time(NULL)                        = 1155079054
22009 select(256, [8], [], NULL, {5, 0}) = 1 (in [8], left {4, 996000})
22009 read(8, "0\202\2t\2\1\2d", 8)     = 8
22009 read(8, "\202\2m\4!uid=benp,ou=People,dc=example,"..., 624) = 624
22009 time(NULL)                        = 1155079054
22009 select(256, [8], [], NULL, {4, 996000}) = 1 (in [8], left {4,
996000})
22009 read(8, "0\f\2\1\2e\7\n", 8)      = 8
22009 read(8, "\1\0\4\0\4\0", 6)        = 6
22009 time(NULL)                        = 1155079054
22009 time(NULL)                        = 1155079054
22009 write(8, "0`\2\1\3c[\4\27ou=group,dc=example,dc=com"..., 98) = 98
22009 time(NULL)                        = 1155079054
22009 select(256, [8], [], NULL, {5, 0}) = 1 (in [8], left {5, 0})
22009 read(8, "0H\2\1\3dC\4", 8)        = 8
22009 read(8, "(cn=group-1,ou=Group,dc=re"..., 66) = 66
22009 time(NULL)                        = 1155079054
22009 select(256, [8], [], NULL, {5, 0}) = 1 (in [8], left {5, 0})
22009 read(8, "0D\2\1\3d?\4", 8)        = 8
22009 read(8, "&cn=group-2,ou=Group,dc=example"..., 62) = 62
22009 time(NULL)                        = 1155079054
22009 select(256, [8], [], NULL, {5, 0}) = 1 (in [8], left {5, 0})
22009 read(8, "0\f\2\1\3e\7\n", 8)      = 8
22009 read(8, "\1\0\4\0\4\0", 6)        = 6
22009 time(NULL)                        = 1155079054
22009 time(NULL)                        = 1155079054
22009 --- SIGSEGV (Segmentation fault) @ 0 (0) ---