[Date Prev][Date Next] [Chronological] [Thread] [Top]

malformed userPassword hash crashes slapd (ITS#2159)



Full_Name: Greg Rowe
Version: 2.0.27
OS: Debuian GNU/Linux 3.0 "woody"
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (147.177.193.70)


Steps to reproduce:

Set some DNs userPassword attribute to {SSHA}invalid_ssha_hash
Attempt to bind using this DN/password
slapd will crash.

Backtrace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 2051 (LWP 16430)]
0x40188cad in memmove () from /lib/libc.so.6
(gdb) bt
#0  0x40188cad in memmove () from /lib/libc.so.6
#1  0x0807fa4d in strcpy ()
#2  0x080814b6 in strcpy ()
#3  0x0807f2b0 in strcpy ()
#4  0x0807ef3e in strcpy ()
#5  0x0806550b in strcpy ()
#6  0x08073c63 in strcpy ()
#7  0x0805d2cb in strcpy ()
#8  0x0804e87c in strcpy ()
#9  0x08082c02 in strcpy ()
#10 0x401060ba in pthread_start_thread () from /lib/libpthread.so.0
#11 0x40106101 in pthread_start_thread_event () from /lib/libpthread.so.0