diff options
| author | Nathan Kinder <nkinder@redhat.com> | 2009-11-09 11:47:11 -0800 |
|---|---|---|
| committer | Nathan Kinder <nkinder@redhat.com> | 2009-11-09 11:47:11 -0800 |
| commit | 45507e8ff5e491dc706a847e64bd09064724835a (patch) | |
| tree | 60b41c22370bb488c9b486db5fae1b53e60a5dee /ldap/servers/plugins/syntaxes/numericstring.c | |
| parent | 07b5f941afb8817c145b8fc73e91c5ea92482948 (diff) | |
| download | ds-45507e8ff5e491dc706a847e64bd09064724835a.tar.gz ds-45507e8ff5e491dc706a847e64bd09064724835a.tar.xz ds-45507e8ff5e491dc706a847e64bd09064724835a.zip | |
Bug 511112 - Eliminate fixed length array in password history code.
The password history code was using a fixed length array to store
the historical password values that are used to compare to the new
password. The array was hardcoded to 25 values. The server will
allow a maximum 24 password history values to be kept by limiting
the passwordInHistory configuration value, though it would be
possible to do something such as import an LDIF with more than 24
historical password values in an entry, causing the server to crash
when the next password change occurs.
This patch eliminates the fixed length array and dynamically
allocates the array based off of the number of values that exist
in the entry whose password is being modified.
Diffstat (limited to 'ldap/servers/plugins/syntaxes/numericstring.c')
0 files changed, 0 insertions, 0 deletions