diff options
| author | Noriko Hosoi <nhosoi@redhat.com> | 2007-07-11 21:29:06 +0000 |
|---|---|---|
| committer | Noriko Hosoi <nhosoi@redhat.com> | 2007-07-11 21:29:06 +0000 |
| commit | cee39a16f9240f9fc4f1257327a54c66a004f15f (patch) | |
| tree | a53532ba57d106304cfdf87fdfe712f5c9c2e0db | |
| parent | 64f60a0fb1b81693d67d0e613e8a63d361a45974 (diff) | |
| download | ds-cee39a16f9240f9fc4f1257327a54c66a004f15f.tar.gz ds-cee39a16f9240f9fc4f1257327a54c66a004f15f.tar.xz ds-cee39a16f9240f9fc4f1257327a54c66a004f15f.zip | |
Resolves: #247725
Summary: rhds71 Invalid LDIF Syntax crashes directory server (comment #18)
Description: The problem was if an RDN ends with '\\', strcpy_special_undo
did not check if there is no more character, and incremented the pointer
beyond the end and accessed the address.
| -rw-r--r-- | ldap/servers/slapd/ava.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ldap/servers/slapd/ava.c b/ldap/servers/slapd/ava.c index ea11033f..1905e4cb 100644 --- a/ldap/servers/slapd/ava.c +++ b/ldap/servers/slapd/ava.c @@ -113,7 +113,7 @@ static void strcpy_special_undo( char *d, const char *s ) { const char *end = s + strlen(s); - for ( ; *s; s++ ) + for ( ; s < end && *s; s++ ) { switch ( *s ) { |