There is a chance we can use a free'd string in the indexing code when debug logging is being used along with attribute encryption. The case is very unlikely, as it requires an attribute name of longer than 255 characters to be used as well as needing an error condition to occur when encrypting the index key.
Created attachment 487435 [details] Patch for cov#10731
Pushed to master. Thanks to Rich for his review! Counting objects: 13, done. Delta compression using up to 2 threads. Compressing objects: 100% (7/7), done. Writing objects: 100% (7/7), 1.08 KiB, done. Total 7 (delta 5), reused 0 (delta 0) To ssh://git.fedorahosted.org/git/389/ds.git 1b22679..13e53f4 master -> master
I'm assuming this is a coverity issue and should be verified by dev. Since coverity reports no issues now, marking this bug as verified.
changed blocker bugs to DSIPA2.0 and 389-1.2.9 because this fix is in 389-ds-base-1.2.9