diff options
| author | Simo Sorce <ssorce@redhat.com> | 2008-06-24 08:40:58 -0400 |
|---|---|---|
| committer | Simo Sorce <ssorce@redhat.com> | 2008-06-30 14:13:25 -0400 |
| commit | f5d9dd647f242841bf9474a3a669b11562fe02f9 (patch) | |
| tree | f03dd6e6b5d0a2528bbb96161551ee28a2d62eb7 | |
| parent | 2dc64eddd4d0e4d4e30820ad9f9b4e850117b038 (diff) | |
| download | freeipa-f5d9dd647f242841bf9474a3a669b11562fe02f9.tar.gz freeipa-f5d9dd647f242841bf9474a3a669b11562fe02f9.tar.xz freeipa-f5d9dd647f242841bf9474a3a669b11562fe02f9.zip | |
slapi_pw_find_sv() expects an array, make sure we have a NULL terminated
one to avoid potential segfaults
Avoid leaking memory too.
| -rw-r--r-- | ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c | 14 |
1 files changed, 9 insertions, 5 deletions
diff --git a/ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c b/ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c index 21e50dbcd..c25d0f11b 100644 --- a/ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c +++ b/ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c @@ -1258,24 +1258,28 @@ static int ipapwd_CheckPolicy(struct ipapwd_data *data) /* skip policy checks */ slapi_entry_free(policy); goto no_policy; - } + } /* first of all check current password, if any */ old_pw = slapi_entry_attr_get_charptr(data->target, "userPassword"); if (old_pw) { - Slapi_Value *cpw; + Slapi_Value *cpw[2] = {NULL, NULL}; Slapi_Value *pw; - cpw = slapi_value_new_string(old_pw); + cpw[0] = slapi_value_new_string(old_pw); pw = slapi_value_new_string(data->password); - if (!cpw || !pw) { + if (!cpw[0] || !pw) { slapi_log_error(SLAPI_LOG_PLUGIN, "ipa_pwd_extop", "ipapwd_checkPassword: Out of Memory\n"); slapi_entry_free(policy); + slapi_value_free(&cpw[0]); + slapi_value_free(&pw); return LDAP_OPERATIONS_ERROR; } - ret = slapi_pw_find_sv(&cpw, pw); + ret = slapi_pw_find_sv(cpw, pw); + slapi_value_free(&cpw[0]); + slapi_value_free(&pw); if (ret == 0) { slapi_log_error(SLAPI_LOG_TRACE, "ipa_pwd_extop", |