Red Hat Bugzilla – Bug 81438
nss_ldap segfaults on big groups
Last modified: 2015-01-07 19:02:49 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 Galeon/1.2.7 (X11; Linux i686; U;) Gecko/20021216
Description of problem:
nss_ldap segfaults in presence of big(gish) groups on the ldap server. I'm not
sure what's the actual breakup point is, but for nss_ldap-198 and 202 its 100%
reproducible here with a group of 4793 users. Older versions (tested on RH7.2)
segfault much earlier, for nss_ldap-189-4 the breakup point seems to be 10 users
in a group.
I can "fix" it (tested on nss_ldap 198) by causing a memory leak by commenting
out "ldap_value_free (vals);" on line 158 of ldap-grp.c, after doing that I can
no more make it crash. Also it doesn't appear to be a null pointer since
changing it to
if (vals != NULL)
doesn't help either. Oh and that doesn't help on nss_ldap-189..
Would be nice to have it fixed not just for the next release but for older
Version-Release number of selected component (if applicable): 189, 198, 202 at
least (haven't tried earlier versions)
Steps to Reproduce:
1. create a group of at least (?) 4793 users on ldap server
2. configure client to fetch user information from ldap
3. run 'id username'
Actual Results: [pmatilai@es-adsl-soho-30-186 pmatilai]$ id pmatilai
Expected Results: I should print out the list of groups..
Forgot to mention: this is using RFC2307bis schema. If compiled without support
for that nss_ldap doesn't crash but then it doesn't provide much info either :)
This might very well be fixed in nss_ldap-203:
Unfortunately I'm not able to actually test it currently as someone has pulled
the plug on the LDAP-server :(
Confirmed now: after updating the current rawhide nss_ldap package to 203 it no
Severn has nss_ldap-207 and as mentioned earlier this was fixed in 203 already -