Issue 5315 - Crash in ldap_parse_page_control
Summary: Crash in ldap_parse_page_control
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-01-09 12:20 UTC by Ralf
Modified: 2014-08-01 21:06 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description Ralf 2008-01-09 12:20:48 UTC
Full_Name: Ralf Haferkamp
Version: RE24, HEAD
OS: any
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (85.8.71.175)


Applications using ldap_parse_page_control (e.g. nss_ldap) might crash. valgrind
reports this:

==21971== Invalid write of size 8
==21971==    at 0x5BDFF04: ldap_parse_page_control (pagectrl.c:263)
==21971==    by 0x599F170: do_result (ldap-nss.c:2511)
==21971==    by 0x599F289: do_parse (ldap-nss.c:2844)
==21971==    by 0x59A0245: _nss_ldap_getent_ex (ldap-nss.c:3413)
[..]
==21971==  Address 0x51fad38 is 0 bytes after a block of size 8 alloc'd
==21971==    at 0x4C2460E: malloc (in
/usr/lib64/valgrind/amd64-linux/vgpreload_memcheck.so)
==21971==    by 0x5E0652C: ber_memalloc_x (memory.c:226)
==21971==    by 0x5BDFEEB: ldap_parse_page_control (pagectrl.c:259)
==21971==    by 0x599F170: do_result (ldap-nss.c:2511)
==21971==    by 0x599F289: do_parse (ldap-nss.c:2844)
==21971==    by 0x59A0245: _nss_ldap_getent_ex (ldap-nss.c:3413)
[..]

Fix is on the way to HEAD.

Comment 1 Ralf 2008-01-09 12:21:27 UTC
moved from Incoming to Software Bugs
Comment 2 Ralf 2008-01-09 12:28:37 UTC
changed notes
changed state Open to Test
Comment 3 Quanah Gibson-Mount 2008-02-12 20:13:57 UTC
changed notes
changed state Test to Release
Comment 4 Quanah Gibson-Mount 2008-02-20 02:34:10 UTC
changed notes
changed state Release to Closed
Comment 5 Howard Chu 2009-02-17 05:23:15 UTC
moved from Software Bugs to Archive.Software Bugs
Comment 6 OpenLDAP project 2014-08-01 21:06:50 UTC
Fixed in HEAD
Fixed in 2.4.8