Resolves: #472457

Summary: Specially crafted Server Side Sort crashes directory server or makes
it unresponsive
Description: The cause of the problem was a buffer overflow. The length of the
2 sort specs "-sn;2.16.840.1.113730.3.3.2.18.1.6 -givenName;2.16.840.1.113730.3.
3.2.18.1.6 " is just about the prepared buffer size, which is unfortunate since
there is no space for the candidate size, e.g., "(1944)" being added later.  By
adding the "(1944)" to the static buffer, it caused buffer overflow and crashed
your server.  The code to check the length of the candidate size before
calculating the buffer size is added.

0 files changed, 0 insertions, 0 deletions