Date: Mon, 2 Mar 2009 17:06:07 GMT From: Martin <nakal@web.de> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/132261: openldap-client-2.4.15 crashes on simple queries Message-ID: <200903021706.n22H67Qh042779@www.freebsd.org> Resent-Message-ID: <200903021710.n22HA22s036457@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 132261 >Category: ports >Synopsis: openldap-client-2.4.15 crashes on simple queries >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Mar 02 17:10:01 UTC 2009 >Closed-Date: >Last-Modified: >Originator: Martin >Release: -CURRENT >Organization: >Environment: More than one machine: FreeBSD zelda.local 8.0-CURRENT FreeBSD 8.0-CURRENT #0: Mon Mar 2 01:13:45 CET 2009 FreeBSD blinky 8.0-CURRENT FreeBSD 8.0-CURRENT #0: Thu Jan 8 14:05:37 CET 2009 >Description: ldapsearch segfaults when using simply queries since update on 2.4.14. openldap-client-2.4.13 does not have this problem. The query on which the client crashes has to use a valid binddn "-D" option with a valid password. First it seems to show the response correctly, but the last line shows a crash "Segmentation fault (core dumped)". It is quite dangerous, if you use ldap for login (pam_ldap). The crash does not allow to login anymore. That's why I gave it severity "serious". I suspect the crash somewhere inside liblber-2.4.so.5, but all tracedumps are broken, so I cannot really tell. >How-To-Repeat: It's easy to reproduce: > ldapsearch -D "cn=Manager,dc=home" -W "(uid=*)" (assuming you have an admin user with binddn "cn=Manager,dc=home" and enter the correct password) >Fix: >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200903021706.n22H67Qh042779>