[Petter Reinholdtsen]
> I can try to to see if I can reproduce it with a given version of
> the svn source (if the build failure is fixed now).  But it might
> take a day or two.

I was able to reproduce a crash with svn version 655.  It was not
easy, and I am not sure if it is the same problem as the last crash.
This is the valgrind output:

==11147== Thread 3:
==11147== Conditional jump or move depends on uninitialised value(s)
==11147==    at 0x805106F: write_group (group.c:143)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==    by 0x40910BC: start_thread (in /lib/tls/libpthread-2.3.6.so)
==11147==    by 0x416A01D: clone (in /lib/tls/libc-2.3.6.so)
==11147==
==11147== Invalid read of size 1
==11147==    at 0x401E211: strlen (mc_replace_strmem.c:246)
==11147==    by 0x8050EC8: write_group (group.c:237)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==    by 0x40910BC: start_thread (in /lib/tls/libpthread-2.3.6.so)
==11147==    by 0x416A01D: clone (in /lib/tls/libc-2.3.6.so)
==11147==  Address 0x708810A is 0 bytes after a block of size 202 alloc'd
==11147==    at 0x401D487: realloc (vg_replace_malloc.c:306)
==11147==    by 0x8050E70: write_group (group.c:215)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==    by 0x40910BC: start_thread (in /lib/tls/libpthread-2.3.6.so)
==11147==    by 0x416A01D: clone (in /lib/tls/libc-2.3.6.so)
==11147==
==11147== Invalid read of size 1
==11147==    at 0x401E208: strlen (mc_replace_strmem.c:246)
==11147==    by 0x8050EC8: write_group (group.c:237)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==    by 0x40910BC: start_thread (in /lib/tls/libpthread-2.3.6.so)
==11147==    by 0x416A01D: clone (in /lib/tls/libc-2.3.6.so)
==11147==  Address 0x7088121 is not stack'd, malloc'd or (recently) free'd
==11147==
==11147== Invalid write of size 1
==11147==    at 0x401E9A0: strcpy (mc_replace_strmem.c:272)
==11147==    by 0x8054254: dn2uid (passwd.c:156)
==11147==    by 0x8050EBE: write_group (group.c:236)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==    by 0x40910BC: start_thread (in /lib/tls/libpthread-2.3.6.so)
==11147==    by 0x416A01D: clone (in /lib/tls/libc-2.3.6.so)
==11147==  Address 0x708812E is not stack'd, malloc'd or (recently) free'd
==11147==
==11147== Invalid write of size 1
==11147==    at 0x401E9A9: strcpy (mc_replace_strmem.c:272)
==11147==    by 0x8054254: dn2uid (passwd.c:156)
==11147==    by 0x8050EBE: write_group (group.c:236)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==    by 0x40910BC: start_thread (in /lib/tls/libpthread-2.3.6.so)
==11147==    by 0x416A01D: clone (in /lib/tls/libc-2.3.6.so)
==11147==  Address 0x7088130 is 16 bytes before a block of size 27 free'd
==11147==    at 0x401CFA5: free (vg_replace_malloc.c:233)
==11147==    by 0x41D7749: ber_memfree (in /usr/lib/liblber.so.2.0.130)
==11147==    by 0x4052E50: ldap_avafree (in /usr/lib/libldap_r.so.2.0.130)
==11147==    by 0x4052EC7: ldap_rdnfree (in /usr/lib/libldap_r.so.2.0.130)
==11147==    by 0x4052F27: ldap_dnfree (in /usr/lib/libldap_r.so.2.0.130)
==11147==    by 0x40562B0: ldap_explode_dn (in /usr/lib/libldap_r.so.2.0.130)
==11147==    by 0x804B862: get_exploded_rdn (myldap.c:1154)
==11147==    by 0x804BA0F: myldap_cpy_rdn_value (myldap.c:1210)
==11147==    by 0x80541AD: dn2uid (passwd.c:132)
==11147==    by 0x8050EBE: write_group (group.c:236)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==
==11147== Invalid write of size 1
==11147==    at 0x401E9AD: strcpy (mc_replace_strmem.c:272)
==11147==    by 0x8054254: dn2uid (passwd.c:156)
==11147==    by 0x8050EBE: write_group (group.c:236)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==    by 0x40910BC: start_thread (in /lib/tls/libpthread-2.3.6.so)
==11147==    by 0x416A01D: clone (in /lib/tls/libc-2.3.6.so)
==11147==  Address 0x7088137 is 9 bytes before a block of size 27 free'd
==11147==    at 0x401CFA5: free (vg_replace_malloc.c:233)
==11147==    by 0x41D7749: ber_memfree (in /usr/lib/liblber.so.2.0.130)
==11147==    by 0x4052E50: ldap_avafree (in /usr/lib/libldap_r.so.2.0.130)
==11147==    by 0x4052EC7: ldap_rdnfree (in /usr/lib/libldap_r.so.2.0.130)
==11147==    by 0x4052F27: ldap_dnfree (in /usr/lib/libldap_r.so.2.0.130)
==11147==    by 0x40562B0: ldap_explode_dn (in /usr/lib/libldap_r.so.2.0.130)
==11147==    by 0x804B862: get_exploded_rdn (myldap.c:1154)
==11147==    by 0x804BA0F: myldap_cpy_rdn_value (myldap.c:1210)
==11147==    by 0x80541AD: dn2uid (passwd.c:132)
==11147==    by 0x8050EBE: write_group (group.c:236)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==
==11147== Invalid write of size 1
==11147==    at 0x8051037: write_group (group.c:247)
==11147==    by 0x80511C1: nslcd_group_all (group.c:360)
==11147==    by 0x804ADD1: worker (nslcd.c:379)
==11147==    by 0x40910BC: start_thread (in /lib/tls/libpthread-2.3.6.so)
==11147==    by 0x416A01D: clone (in /lib/tls/libc-2.3.6.so)
==11147==  Address 0x708817F is not stack'd, malloc'd or (recently) free'd

I hope this help.

Happy hacking,
-- 
Petter Reinholdtsen



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to