diff options
| author | Noriko Hosoi <nhosoi@redhat.com> | 2010-04-27 10:31:49 -0700 |
|---|---|---|
| committer | Noriko Hosoi <nhosoi@redhat.com> | 2010-04-27 10:31:49 -0700 |
| commit | b65b3c97847edefe8e9242e5bac294dd13e73234 (patch) | |
| tree | 2859d29db58c36563dc1e6a6f7c14135674b915e /ldap/admin/src/scripts/50numericstringsyntaxplugin.ldif | |
| parent | 3155d9ce34ca1caec53762237815e4ed7bb59da6 (diff) | |
| download | ds-b65b3c97847edefe8e9242e5bac294dd13e73234.tar.gz ds-b65b3c97847edefe8e9242e5bac294dd13e73234.tar.xz ds-b65b3c97847edefe8e9242e5bac294dd13e73234.zip | |
585905 - ACL with targattrfilters error crashes the server
https://bugzilla.redhat.com/show_bug.cgi?id=585905
Bug Description:
targattrfilters takes this format of value:
(targattrfilters="add=attr1:F1 && attr2:F2... &&
attrn:Fn,del=attr1:F1 && attr2:F2 ... && attrn:Fn")
The ACL plugin code had blindly expected the value contains
the operator "add" or "del" and '=' to concatenate the
attribute and filter pair. The plugin should have checked
the possibility that the value does not follow the format.
Fix Description:
If '=' is not included in the targattrfilters value, the
ACL parser returns ACL_SYNTAX_ERR. Also, adding a check
code for the returned pointer from strchr and strstr.
Diffstat (limited to 'ldap/admin/src/scripts/50numericstringsyntaxplugin.ldif')
0 files changed, 0 insertions, 0 deletions