1 files changed, 4 insertions, 0 deletions
diff --git a/ldap/servers/slapd/dn.c b/ldap/servers/slapd/dn.c
index a163fb35..54ddac10 100644
--- a/ldap/servers/slapd/dn.c
+++ b/ldap/servers/slapd/dn.c
@@ -564,6 +564,10 @@ slapi_dn_normalize_ext(char *src, size_t src_len, char **dest, size_t *dest_len)
                 *d++ = *s++;
             } else if (ISSPACE(*s)) {
                 state = B4EQUAL; /* skip a trailing space */
+            } else if (ISQUOTE(*s) || SEPARATOR(*s)) {
+                /* type includes quote / separator; not a valid dn */
+                rc = -1;
+                goto bail;
             } else {
                 *d++ = *s++;
             }