[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#5692) literal constant 8192 used instead of SLAP_LDAPDN_MAXLEN



Full_Name: Andreas Moroder
Version: 2.4.11
OS: Suse Linux 10.2
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (151.47.3.213)


Hello,

in
/servers/slapd/bconfig.c
/libraries/libldap_r/tls.c
/libraries/libldap_r/tls.c
./libraries/liblber/stdio.c
/libraries/liblunicode/ucdata/ucgendat.c
/contrib/slapd-modules/lastmod/lastmod.c

the literal value 8192 is used for array sizes instead of SLAP_LDAPDN_MAXLEN 
8192
defined in /servers/slapd/slap.h  

I think this could become a problem if SLAP_LDAPDN_MAXLEN grows in a future
release.

A question from a newbie:
What happens in a mixed environment with a never version with bigger
SLAP_LDAPDN_MAXLEN that replicates his entries to a version with
SLAP_LDAPDN_MAXLEN at 8192 ?
Isn't it wrong not to check for a buffer owerflow when strings are concantenated
and suppose that the data we use does not exceed the limit ?

Bye
Andreas