#361 Bad DNs in ACIs can segfault ns-slapd
Closed: wontfix None Opened 10 years ago by tjarls.

Version 1.2.10 segfaults on start up if an ACI has an bad DN. The segmentation fault occurs during the parsing of the ACI in function __aclp__copy_normalized_str. I tracked the defect to this commit:

http://git.fedorahosted.org/git/?p=389/ds.git;a=commitdiff;h=f6397113666f06848412bb12f754f04258cfa5fa

A bad DN can will make the DN normalization fail which is not tested any more. I am attaching a trivial patch that tests for this case and returns -1 when the normalization failed, thus restoring the previous behaviour of the function.


To ssh://git.fedorahosted.org/git/389/ds.git
197a8f5..8ba2982 master -> master
commit changeset:8ba2982/389-ds-base
Author: Charles Lopes clopes@amazon.com
Date: Tue May 8 15:37:59 2012 +0000
To ssh://git.fedorahosted.org/git/389/ds.git
c89ea2f..58ec62b 389-ds-base-1.2.11 -> 389-ds-base-1.2.11
commit changeset:58ec62b/389-ds-base
To ssh://git.fedorahosted.org/git/389/ds.git
2bead40..e5bdf55 389-ds-base-1.2.10 -> 389-ds-base-1.2.10
commit changeset:e5bdf55/389-ds-base

Added initial screened field value.

Metadata Update from @nkinder:
- Issue assigned to rmeggins
- Issue set to the milestone: 1.2.11.4

5 years ago

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/361

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix (was: Fixed)

2 years ago

Login to comment on this ticket.

Metadata