[PATCH] s4-ranged_result.c: Fix memory context for ranged attributes handling

[Zahari Zahariev]

Hi Kamen,

This is the backtrace I get from gdb now:

Program received signal SIGABRT, Aborted.
0x00007ffff4931ba5 in raise () from /lib/libc.so.6
(gdb) bt
#0  0x00007ffff4931ba5 in raise () from /lib/libc.so.6
#1  0x00007ffff49356b0 in abort () from /lib/libc.so.6
#2  0x00007ffff6ae82ec in smb_panic (why=0x7ffff62a9570 "Bad talloc 
magic value - unknown value")
     at ../../lib/util/fault.c:150
#3  0x00007ffff62a5dd9 in talloc_abort (reason=0x7ffff62a9570 "Bad 
talloc magic value - unknown value")
     at ../../lib/talloc/talloc.c:213
#4  0x00007ffff62a5e67 in talloc_abort_unknown_value () at 
../../lib/talloc/talloc.c:234
#5  0x00007ffff62a5ede in talloc_chunk_from_ptr (ptr=0x7fffe7b028df) at 
../../lib/talloc/talloc.c:253
#6  0x00007ffff62a79ff in _talloc_free (ptr=0x7fffe7b028df,
     location=0x7fffe7b02938 
"../dsdb/samdb/ldb_modules/ranged_results.c:168") at 
../../lib/talloc/talloc.c:1149
#7  0x00007fffe7b023ab in rr_search_callback (req=0xe8eb50, ares=0x755930)
     at ../dsdb/samdb/ldb_modules/ranged_results.c:168
#8  0x00007ffff7ba3eff in ldb_module_send_entry (req=0xe8eb50, 
msg=0xd71510, ctrls=0x1d2a420)
     at ../lib/ldb/common/ldb_modules.c:715
#9  0x00007fffeab8c0e0 in acl_search_callback (req=0x1cdfab0, 
ares=0x1bdeae0)
     at ../dsdb/samdb/ldb_modules/acl.c:1125
#10 0x00007ffff7ba3eff in ldb_module_send_entry (req=0x1cdfab0, 
msg=0xd71510, ctrls=0x1d2a420)
     at ../lib/ldb/common/ldb_modules.c:715
#11 0x00007fffe8323b5e in operational_callback (req=0xd70ed0, ares=0x755a60)
     at ../dsdb/samdb/ldb_modules/operational.c:722
#12 0x00007ffff7ba3eff in ldb_module_send_entry (req=0xd70ed0, 
msg=0xd71510, ctrls=0x1d2a420)
     at ../lib/ldb/common/ldb_modules.c:715
#13 0x00007fffe9f64111 in extended_callback (req=0x1b61380, 
ares=0x1bdf090, handle_dereference=0)
     at ../dsdb/samdb/ldb_modules/extended_dn_out.c:574
#14 0x00007fffe9f64145 in extended_callback_ldb (req=0x1b61380, 
ares=0x1bdf090)
     at ../dsdb/samdb/ldb_modules/extended_dn_out.c:579
#15 0x00007fffea97d9bc in dsdb_next_callback (req=0x1b61600, ares=0x1bdf090)
     at ../dsdb/samdb/ldb_modules/util.c:626
#16 0x00007ffff7ba3eff in ldb_module_send_entry (req=0x1b61600, 
msg=0xd71510, ctrls=0x1d2a420)
     at ../lib/ldb/common/ldb_modules.c:715
#17 0x00007fffe8116b7b in partition_req_callback (req=0x1b617c0, 
ares=0x1d2b050)
     at ../dsdb/samdb/ldb_modules/partition.c:181
#18 0x00007ffff7ba3eff in ldb_module_send_entry (req=0x1b617c0, 
msg=0xd71510, ctrls=0x0)
---Type <return> to continue, or q <return> to quit---
     at ../lib/ldb/common/ldb_modules.c:715
#19 0x00007ffff7bc4d9a in ltdb_index_filter (dn_list=0x1cdf780, 
ac=0x1c31c20, match_count=0x7fffffffde28)
     at ../lib/ldb/ldb_tdb/ldb_index.c:967
#20 0x00007ffff7bc523c in ltdb_search_indexed (ac=0x1c31c20, 
match_count=0x7fffffffde28)
     at ../lib/ldb/ldb_tdb/ldb_index.c:1073
#21 0x00007ffff7bc2fa6 in ltdb_search (ctx=0x1c31c20) at 
../lib/ldb/ldb_tdb/ldb_search.c:570
#22 0x00007ffff7bc0c4f in ltdb_callback (ev=0x629ee0, te=0x1c31620, 
t=..., private_data=0x1c31c20)
     at ../lib/ldb/ldb_tdb/ldb_tdb.c:1261
#23 0x00007ffff64b4526 in tevent_common_loop_timer_delay (ev=0x629ee0) 
at ../../lib/tevent/tevent_timed.c:254
#24 0x00007ffff64b3b49 in std_event_loop_once (ev=0x629ee0,
     location=0x7ffff7bcb27d "../lib/ldb/common/ldb.c:606") at 
../../lib/tevent/tevent_standard.c:537
#25 0x00007ffff64af7b2 in _tevent_loop_once (ev=0x629ee0, 
location=0x7ffff7bcb27d "../lib/ldb/common/ldb.c:606")
     at ../../lib/tevent/tevent.c:493
#26 0x00007ffff7b9e8b4 in ldb_wait (handle=0xe8e910, type=LDB_WAIT_ALL) 
at ../lib/ldb/common/ldb.c:606
#27 0x00007fffebd36577 in ldapsrv_SearchRequest (call=0x13c3740) at 
../ldap_server/ldap_backend.c:609
#28 0x00007fffebd388e5 in ldapsrv_do_call (call=0x13c3740) at 
../ldap_server/ldap_backend.c:1164
#29 0x00007fffebd345a4 in ldapsrv_process_call_trigger (req=0x14e89d0, 
private_data=0x0)
     at ../ldap_server/ldap_server.c:725
#30 0x00007ffff64b097e in tevent_queue_immediate_trigger (ev=0x629ee0, 
im=0x1b58120, private_data=0x1afe2c0)
     at ../../lib/tevent/tevent_queue.c:144
#31 0x00007ffff64b0610 in tevent_common_loop_immediate (ev=0x629ee0) at 
../../lib/tevent/tevent_immediate.c:135
#32 0x00007ffff64b3b32 in std_event_loop_once (ev=0x629ee0, 
location=0x40e2af "../smbd/server.c:480")
     at ../../lib/tevent/tevent_standard.c:532
#33 0x00007ffff64af7b2 in _tevent_loop_once (ev=0x629ee0, 
location=0x40e2af "../smbd/server.c:480")
     at ../../lib/tevent/tevent.c:493
#34 0x00007ffff64af9ef in tevent_common_loop_wait (ev=0x629ee0, 
location=0x40e2af "../smbd/server.c:480")
     at ../../lib/tevent/tevent.c:594
#35 0x00007ffff64afaba in _tevent_loop_wait (ev=0x629ee0, 
location=0x40e2af "../smbd/server.c:480")
     at ../../lib/tevent/tevent.c:613
#36 0x0000000000409fbd in binary_smbd_main (binary_name=0x40dcdb 
"samba", argc=5, argv=0x7fffffffe698)
     at ../smbd/server.c:480
#37 0x000000000040a003 in main (argc=5, argv=0x7fffffffe698) at 
../smbd/server.c:491


On 11/30/10 5:53 PM, Kamen Mazdrashki wrote:
> Zak, Andrew,
>
> Attached is a patch to fix panic in ranged_attributes module.
>
> Andrew, Zak has a  good test environment to verify the fix works
>