From 00513dbb4b97b6b91510ec3b57ae0e8c6b952195 Mon Sep 17 00:00:00 2001
From: William Brown <firstyear@redhat.com>
Date: Dec 08 2015 04:13:44 +0000
Subject: Ticket 48372 - ASAN invalid write in dblayer.c


Bug Description:  During server start up we attempt to write 513 bytes to a
buffer that is only 512 bytes long.

Fix Description:  Increase the size of the buffer that sscanf writes into.

https://fedorahosted.org/389/ticket/48372

Author: wibrown

Review by: rmeggins (Thanks!)

---

diff --git a/ldap/servers/slapd/back-ldbm/dblayer.c b/ldap/servers/slapd/back-ldbm/dblayer.c
index 33506f4..9168c8c 100644
--- a/ldap/servers/slapd/back-ldbm/dblayer.c
+++ b/ldap/servers/slapd/back-ldbm/dblayer.c
@@ -5191,8 +5191,8 @@ static int read_metadata(struct ldbminfo *li)
     PRFileInfo64 prfinfo;
     int return_value = 0;
     PRInt32 byte_count = 0;
-    char attribute[512];
-    char value[128], delimiter;
+    char attribute[513];
+    char value[129], delimiter;
     int number = 0;
     dblayer_private *priv = (dblayer_private *)li->li_dblayer_private;