Author: nkinder
Update of /cvs/dirsec/ldapserver/ldap/servers/slapd
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv7329/ldap/servers/slapd
Modified Files:
regex.c
Log Message:
Resolves: 174394
Summary: Make regex filter code handle empty values properly.
Index: regex.c
===================================================================
RCS file: /cvs/dirsec/ldapserver/ldap/servers/slapd/regex.c,v
retrieving revision 1.7
retrieving revision 1.8
diff -u -r1.7 -r1.8
--- regex.c 30 Jun 2008 17:28:16 -0000 1.7
+++ regex.c 12 Jan 2009 18:14:57 -0000 1.8
@@ -66,6 +66,10 @@
* Modification history:
*
* $Log$
+ * Revision 1.8 2009/01/12 18:14:57 nkinder
+ * Resolves: 174394
+ * Summary: Make regex filter code handle empty values properly.
+ *
* Revision 1.7 2008/06/30 17:28:16 nhosoi
* Resoves: #448831
* Summary: attacker can tie up CPU in regex code
@@ -769,7 +773,8 @@
do {
if ((ep = pmatch((UCHAR*)lp,ap,time_up,&ldaperror)))
break;
- lp++;
+ if (*lp)
+ lp++;
} while (*lp);
break;
Show replies by date