Bug 1253645

Summary: segfault in ldap_set_option
Product: [Fedora] Fedora EPEL Reporter: Brian J. Murrell <brian>
Component: squidGuardAssignee: Gwyn Ciesla <gwync>
Status: ASSIGNED --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: epel7CC: gwync
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Brian J. Murrell 2015-08-14 11:20:17 UTC 
Description of problem:
Program received signal SIGSEGV, Segmentation fault.
ldap_set_option (ld=ld@entry=0xffffffffec809c70, option=option@entry=17, invalue=invalue@entry=0x7fff84895e3c) at options.c:450
450                     assert( LDAP_VALID( ld ) );
(gdb) where
#0  ldap_set_option (ld=ld@entry=0xffffffffec809c70, option=option@entry=17, invalue=invalue@entry=0x7fff84895e3c) at options.c:450
#1  0x00007fc5eab92059 in sgDoLdapSearch (
    url=0x7fc5ec56e1d0 "ldap://ldap.example.com/cn=brian,ou=Group,dc=interlinx,dc=bc,dc=ca?memberUid?sub?(&(objectclass=posixGroup)(memberUid=%s))", 
    username=username@entry=0x7fff848b1054 "brian") at sg.y:2721
#2  0x00007fc5eab924f5 in sgFindUser (src=src@entry=0x7fc5ec56e110, ident=ident@entry=0x7fff848b1054 "brian", rval=rval@entry=0x7fff84898f00) at sg.y:2569
#3  0x00007fc5eab92757 in sgFindSource (bsrc=bsrc@entry=0x7fc5ec56e110, net=net@entry=0x7fff848ba060 "fd31:aeb1:48df:0:feaa:14ff:fe6c:51ab", 
    ident=ident@entry=0x7fff848b1054 "brian", domain=domain@entry=0x7fff848ae054 "") at sg.y:1030
#4  0x00007fc5eab89646 in main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>) at main.c:195


Version-Release number of selected component (if applicable):
squidGuard-1.4-20.el7.1.x86_64

How reproducible:
100%

Steps to Reproduce:
1. Install squid and squidGuard
2. Configure squidGuard to use LDAP lookup for users
3. Fetch a URL

Actual results:
squidGuard segfaults

Expected results:
squidGuard should not segfault

Additional info:
LDAP configuration in squidGuard.conf:

ldapprotover    3

src brian {
        ldapusersearch  ldap://ldap.example.com/cn=brian,ou=Group,dc=example,dc=com?memberUid?sub?(&(objectclass=posixGroup)(memberUid=%s))
}
...
brian { 
                pass whitelist !advertising all
                # redirect in the dest
        }
Comment 1 Gwyn Ciesla 2015-08-31 19:47:51 UTC 
See if the build here helps.

https://fedorapeople.org/~limb/squidGuard/