ptloader crash

[Dmitriy Kirhlarov]

Ken Murchison wrote:
> Try this patch:
> 
> https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/cyrus/ptclient/ldap.c.diff?r1=1.10;r2=1.11;sortby=date;f=h;f=u 

Does not help.
Crashing again.

BTW, this patch fixing multiple ldap groups issue, but I get crash before:
  - imapd open connection and get username
  - ptloader connect to ldap for get user dn, get data and crashing

It's before connection to saslauthd for authentication and before 
checking groups.

Backtrace after patch apply:

(gdb) bt full
#0  0x00000000004088e2 in ptsmodule_make_authstate_attribute 
(canon_id=0x5d8ac0 "victim", size=6, reply=0x7fffffffe118, 
dsize=0x7fffffffdf0c, newstate=0x7fffffffde78) at ldap.c:918
         i = 0
         numvals = 4225674
         dn = 0x801d1c7a0 "uid=victim,ou=temp,ou=users,o=vega"
         res = (LDAPMessage *) 0x801d18300
         entry = (LDAPMessage *) 0x801d18300
         attr = 0x801d095d0 "gidNumber"
         vals = (char **) 0x1d095e0
         ber = (BerElement *) 0x801d07430
         rc = 0
         attrs = {0x0, 0x0}
#1  0x000000000040969f in myauthstate (identifier=0x7fffffffdf10 
"victim", size=6, reply=0x7fffffffe118, dsize=0x7fffffffdf0c) at ldap.c:1215
         canon_id = 0x5d8ac0 "victim"
         newstate = (struct auth_state *) 0x0
         rc = 4999220
         retries = 1
#2  0x00000000004062d0 in ptsmodule_make_authstate 
(identifier=0x7fffffffdf10 "victim", size=6, reply=0x7fffffffe118, 
dsize=0x7fffffffdf0c) at ptloader.c:121
         pts = (struct pts_module *) 0x5c5220
#3  0x0000000000406699 in service_main_fd (c=7, argc=1, 
argv=0x801d07070, envp=0x7fffffffeb98) at ptloader.c:248
         keyinhex = 
"\0008_\000\b\000\000\000\000:_\000\b\000\000\000\000<_\000\b\000\000\000\000>_\000\b\000\000\000\000 at _\000\b", 
'\0' <repeats 11 times>, 
"\030\000\000\0000\000\000\0000âÿÿÿ\177\000\000páÿÿÿ\177\000\000»µ\\\000\b", 
'\0' <repeats 11 times>, 
" áÿÿÿ\177\000\000Z!\000\000\000\000\000\000ìd\234\001\b\000\000\000`\204\003\025\000ÿÿÿ(âÿÿÿ\177\000\000Wed 
Oct 17 11:29:19 
2007\n\000_\000\b\000\000\000`P\230\001\b\000\000\000·I~\001\b\000\000\000uÕÿÿÿ\177\000\000Ë\a\000\0001:29:19 
2007\017ò"...
         reply = 0x0
         user = "victim", '\0' <repeats 505 times>
         rc = 8538
         dsize = 0
         size = 6
         newstate = (struct auth_state *) 0x7fffffffe780
#4  0x0000000000409eab in main (argc=1, argv=0x7fffffffeb88, 
envp=0x7fffffffeb98) at service-thread.c:304
         fdflags = 0
         fd = 7
         p = 0x7fffffffed92 "ptloader"
         service = 0x801d09080 "ptloader"
         request = {fd = -1, user = '\0' <repeats 127 times>, daemon = 
"ptloader", '\0' <repeats 119 times>, pid = "8538\000\000\000\000\000", 
client = {{name = '\0' <repeats 127 times>,
       addr = '\0' <repeats 127 times>, sin = 0x0, unit = 0x0, request = 
0x7fffffffe780}}, server = {{name = '\0' <repeats 127 times>, addr = 
'\0' <repeats 127 times>, sin = 0x0, unit = 0x0,
       request = 0x7fffffffe780}}, sink = 0, hostname = 0, hostaddr = 0, 
cleanup = 0, config = 0x0}
         opt = -1
         alt_config = 0x0
         call_debugger = 0
         newargc = 1
         newargv = (char **) 0x801d07070

WBR.
Dmitriy