Bug 1449098

Created attachment 1277312 [details]
full st.

Description of problem:

there's a directory crash while creating role cache. At first I thought it could be "bug 1419162 A filtered nsrole that specifies an empty nsrole in its nsRoleFilter will result in a segfault." but this bug is fixed in customer version: 389-ds-base-1.3.5.10-20

The problem is that customer cannot give us the core file because of confidentiality.

We see in the stack trace:

Thread 1 (Thread 0x7ff7502478c0 (LWP 6591)):
#0  0x00007ff7427c4d68 in strcmpi_fast (src=0x7ff7427c6fe3 "nsRole", dst=0x1 <Address 0x1 out of bounds>) at ldap/servers/slapd/intrinsics.h:29
        f = <optimized out>
        l = <optimized out>
#1  roles_check_filter (filter_list=0x7ff76fcbbb80) at ldap/servers/plugins/roles/roles_cache.c:1089
        f = 0x7ff76fcbbc80
        type = 0x0
#2  roles_cache_create_object_from_entry (hint=0, result=<synthetic pointer>, role_entry=0x7ff76fb992c0) at ldap/servers/plugins/roles/roles_cache.c:1277
        filter = 0x7ff76fcbbb80
        filter_attr_value = 0x7ff751828640 "(&(|(objectclass=govermentalapplicationprocess)(networkuser=app::*))(userpassword=*))"
        pb = <optimized out>
        parent = 0x0
        rc = 0
        type = <optimized out>
        this_role = 0x7ff76fc5aac0
        rolescopeDN = <optimized out>


So, we can deduce that in 

static int roles_check_filter(Slapi_Filter *filter_list)
{
        Slapi_Filter  *f;
        char *type = NULL;

        for ( f = slapi_filter_list_first( filter_list );
                  f != NULL;
                  f = slapi_filter_list_next( filter_list, f ) )
        {
                slapi_filter_get_attribute_type(f, &type);
                if (strcasecmp(type, NSROLEATTR) == 0){
                        return -1;
                }
        }

        return 0;
}

while browsing the Slapi_Filter object that was built from:

"(&(|(objectclass=govermentalapplicationprocess)(networkuser=app::*))(userpassword=*))"

one of the attribute types is corrupted.

I could try to ask the customer to run gdb and get more information if needed.

I will attach full pstack.

Version-Release number of selected component (if applicable): 389-ds-base-1.3.5.10-20