From bc7df12bbdeade5ba5115e5ea900d16ddd23c046 Mon Sep 17 00:00:00 2001
From: Noriko Hosoi <nhosoi@redhat.com>
Date: Tue, 31 Aug 2010 13:57:04 -0700
Subject: DN normalizer should check the invalid type

File: ldap/servers/slapd/dn.c
Description: slapi_dn_normalize_ext failed to check a typical
invald DN (e.g., "bogus,dc=example,dc=com"), in which RDN does
not have the type=value format.  The problem is fixed.
---
 ldap/servers/slapd/dn.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ldap/servers/slapd/dn.c b/ldap/servers/slapd/dn.c
index a163fb35..54ddac10 100644
--- a/ldap/servers/slapd/dn.c
+++ b/ldap/servers/slapd/dn.c
@@ -564,6 +564,10 @@ slapi_dn_normalize_ext(char *src, size_t src_len, char **dest, size_t *dest_len)
                 *d++ = *s++;
             } else if (ISSPACE(*s)) {
                 state = B4EQUAL; /* skip a trailing space */
+            } else if (ISQUOTE(*s) || SEPARATOR(*s)) {
+                /* type includes quote / separator; not a valid dn */
+                rc = -1;
+                goto bail;
             } else {
                 *d++ = *s++;
             }
-- 
cgit