Author: nhosoi
Update of /cvs/dirsec/ldapserver/ldap/servers/slapd
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30667
Modified Files:
ava.c
Log Message:
Resolves: #247725
Summary: rhds71 Invalid LDIF Syntax crashes directory server (comment #18)
Description: The problem was if an RDN ends with '\\', strcpy_special_undo
did not check if there is no more character, and incremented the pointer
beyond the end and accessed the address.
Index: ava.c
===================================================================
RCS file: /cvs/dirsec/ldapserver/ldap/servers/slapd/ava.c,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- ava.c 10 Nov 2006 23:45:40 -0000 1.6
+++ ava.c 11 Jul 2007 21:29:06 -0000 1.7
@@ -113,7 +113,7 @@
strcpy_special_undo( char *d, const char *s )
{
const char *end = s + strlen(s);
- for ( ; *s; s++ )
+ for ( ; s < end && *s; s++ )
{
switch ( *s )
{
Show replies by date