Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 448900

Summary: SIGSEGV in a search
Product: [Retired] 389 Reporter: Paulo Alberto <pauloviolada>
Component: Directory ServerAssignee: Rich Megginson <rmeggins>
Status: CLOSED DUPLICATE QA Contact: Orla Hegarty <ohegarty>
Severity: urgent Docs Contact:
Priority: low    
Version: 1.1.0CC: nkinder
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-06-24 17:01:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Strace from crash.
none
Another strace from the crash. none

Description Paulo Alberto 2008-05-29 12:53:34 UTC
Description of problem:

 I'm getting a SEGFAULT with fedora-ds-1.1.0-3.fc6 when a search is performed.

How reproducible:

 I'm not able to reproduce this yet. It is crashing randomly.


Actual results:

--- SIGSEGV (Segmentation fault) @ 0 (0) ---

Expected results:

 Return the search results.

Additional info:

Attached strace file from the crash.

Comment 1 Paulo Alberto 2008-05-29 12:53:34 UTC
Created attachment 307046 [details]
Strace from crash.

Comment 2 Paulo Alberto 2008-05-29 12:57:28 UTC
OS: RHEL5

Comment 3 Rich Megginson 2008-05-29 14:42:55 UTC
What is the search?  Base, scope, filter, attribute list?  Can you post excerpts
from the access or error log around the time of the crash?  Could this be
related to the substring filter problem?

Comment 4 Paulo Alberto 2008-05-29 15:17:51 UTC
I did not post it because it appears in the strace file. But there it is:

Search (from access log):

[29/May/2008:09:34:04 -0300] conn=2722 op=1 SRCH base="o=XXXXXXXXXXXX" scope=2
filter="(&(|(objectClass=inetorgperson)(objectClass=posixaccount)(objectClass=groupOfUniqueNames))(|(cn=*Macintosh*)(mail=*Macintosh*)))"
attrs="uidNumber uid cn givenName sn audio description labeledUri o ou title
street l st postalCode telephoneNumber homePhone facsimileTelephoneNumber mobile
pager mail roomNumber jpegPhoto displayName postalAddress userSMIMECertificate
birthDate note carPhone primaryPhone category businessRole assistantPhone
assistantName fileAs homeFacsimileTelephoneNumber freeBusyURI calendarURI
otherPhone callbackPhone entryuuid uid uidNumber objectClass createTimestamp
modifyTimestamp creatorsName modifiersName objectClass"

Error log does not show nothing.

I don't think this could be related to the substring filter problem. The other
problem was because the search filter was too long, but it is not this case.

Comment 5 Rich Megginson 2008-05-29 15:27:50 UTC
Thanks.  This search does use a substring filter, but as you say, it is small. 
How many entries should match this filter?  Have you been able to get a
consistently reproducible test case?  Have you been able to get a core with
stack trace?

Comment 6 Paulo Alberto 2008-05-29 15:45:57 UTC
This matches only one entry.

Unfortunately I have not been able to reproduce it yet, but I'm still trying.

Yesterday there was another crash, with the same search style, but that does not
match any entry:

[28/May/2008:15:30:42 -0300] conn=192298 op=1 SRCH base="o=XXXXXXXXX" scope=2
filter="(&(|(objectClass=inetorgperson)(objectClass=posixaccount)(objectClass=groupOfUniqueNames))(|(sn=*uilsom*)(givenName=*uilsom*)(o=*uilsom*)(ou=*uilsom*)(description=*uilsom*)(mail=*uilsom*)))"
attrs="uidNumber uid cn givenName sn audio description labeledUri o ou title
street l st postalCode telephoneNumber homePhone facsimileTelephoneNumber mobile
pager mail roomNumber jpegPhoto displayName postalAddress userSMIMECertificate
birthDate note carPhone primaryPhone category businessRole assistantPhone
assistantName fileAs homeFacsimileTelephoneNumber freeBusyURI calendarURI
otherPhone callbackPhone entryuuid uid uidNumber objectClass createTimestamp
modifyTimestamp creatorsName modifiersName objectClass"

I don't know if strace helps, but it's attached.

Sorry, but I don't know how to get a core with strack trace. I will try to learn
and send it.

Comment 7 Paulo Alberto 2008-05-29 15:46:30 UTC
Created attachment 307101 [details]
Another strace from the crash.

Comment 8 Rich Megginson 2008-05-29 17:08:33 UTC
strace is usually no good with a crash since strace only shows system calls and
crashes are usually in our code :P

# gdb /usr/sbin/ns-slapd /path/to/core.pid
(gdb) bt

This will print out the stack trace

Comment 9 Rich Megginson 2008-06-24 17:01:07 UTC
I'm going to mark this as a duplicate of
https://bugzilla.redhat.com/show_bug.cgi?id=182621 - please reopen if you feel
this is not correct.

*** This bug has been marked as a duplicate of 182621 ***