Glad I could help and thanks for looking in to it. Also, not to be greedy,
but do you think you could make a quick patch for the 0.7.13 branch I'm
running? That file seems to be quite a bit different than the one I've got
here, I'm assuming it's for the newer 0.8 branch? Unless you think the 0.8
branch will build and run on debian squeeze, in which case I can just try
that.

--
Isaac Freeman - Systems Administrator
IBM Information Protection Services
is...@us.ibm.com
919-254-0245



From:   Arthur de Jong <adej...@debian.org>
To:     Isaac Freeman/Raleigh/Contr/IBM@IBMUS, 638...@bugs.debian.org
Date:   08/24/2011 04:41 PM
Subject:        Re: Bug#638872: nslcd: segfault when tls_ciphers is declared



tags 638872 + pending
thanks

On Tue, 2011-08-23 at 16:46 -0400, Isaac Freeman wrote:
> Alright, got the backtrace. One concern... there is a really long
> string on escaped octal(?) numbers... Is that the key itself? It's
> fine if it is, I can generate new keys, just want to check.

The key shouldn't have been loaded at this point yet. It is the contents
of a buffer that is used for reading and parsing the configuration file.

> (gdb) r -d
> (gdb) bt
> #0 __strcmp_sse42 () at ../sysdeps/x86_64/multiarch/strcmp.S:129
> #1 0x00000000004088e7 in get_restdup (filename=<value optimized out>,
> lnr=<value optimized out>, keyword=0x7fffffffe4e0 "tls_ciphers",
> line=0x1c, var=0x7fffffffe518) at cfg.c:418
> #2 0x0000000000409e19 in cfg_read (filename=0x416ca6
> "/etc/nslcd.conf",
> cfg=0x61e650) at cfg.c:979
> #3 0x000000000040a529 in cfg_init (fname=0x416ca6 "/etc/nslcd.conf")
> at cfg.c:1160
> #4 0x000000000040378b in main (argc=-178911408, argv=<value optimized
> out>)
> at nslcd.c:631

Thanks, that did the trick. The problem was that some uninitialised
value was passed. This seems to go fine (although valgrind complains) in
i386 but segfaults on amd64.

Apparently this bug has been there since 2009 and was indeed similar to
the problem that was fixed in 0.6.10 ;) Good call!

The fix is available here
  http://arthurdejong.org/viewvc/nss-pam-ldapd?view=rev&revision=1515
and should be fixed in unstable with the next upload. I'll also try to
get this into squeeze.

Thanks for reporting this and providing the information needed!

--
-- arthur - adej...@debian.org - http://people.debian.org/~adejong --
[attachment "signature.asc" deleted by Isaac Freeman/Raleigh/Contr/IBM]

<<inline: graycol.gif>>

Reply via email to