Bug#629589: Also affects Heimdal

Richard A Nelson cowboy at debian.org
Wed Jun 8 03:40:08 UTC 2011


Indeed, I see this with the Cyrus Heimdal package set as well

$ valgrind ldapwhoami
==31776== Command: ldapwhoami
==31776==
SASL/GSSAPI authentication started
SASL username: <redacted>
SASL SSF: 56
SASL data security layer installed.
==31776== Invalid write of size 1
==31776==    at 0x815F549: ??? (in /usr/lib/sasl2/libgssapiv2.so.2.0.24)
==31776==    by 0x4E874A1: ??? (in /usr/lib/libsasl2.so.2.0.24)
==31776==    by 0x4E89AC2: sasl_encodev (in /usr/lib/libsasl2.so.2.0.24)
==31776==    by 0x4E89BDE: sasl_encode (in /usr/lib/libsasl2.so.2.0.24)
==31776==    by 0x4A3A974: ??? (in /usr/lib/libldap_r-2.4.so.2.7.0)
==31776==    by 0x4A3D579: ??? (in /usr/lib/libldap_r-2.4.so.2.7.0)
==31776==    by 0x4C79068: ??? (in /usr/lib/liblber-2.4.so.2.7.0)
==31776==    by 0x4C7A44E: ber_int_sb_write (in /usr/lib/liblber-2.4.so.2.7.0)
==31776==    by 0x4C76A5A: ber_flush2 (in /usr/lib/liblber-2.4.so.2.7.0)
==31776==    by 0x4A4872A: ldap_int_flush_request (in /usr/lib/libldap_r-
==31776==    by 0x4A48C01: ldap_send_server_request (in /usr/lib/libldap_r-
==31776==    by 0x4A48DD1: ldap_send_initial_request (in /usr/lib/libldap_r-
==31776==  Address 0x0 is not stack'd, malloc'd or (recently) free'd==31776==
==31776==
==31776== Process terminating with default action of signal 11 (SIGSEGV)
==31776==  Access not within mapped region at address 0x0

I've not tried the patch, but it seems likely





More information about the Pkg-cyrus-sasl2-debian-devel mailing list