[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#6036) Crash: UUIDNormalize doesn't clear output on error

Full_Name: Test Seven
Version: 2.4.15
OS: Windows
URL: 
Submission from: (NULL) (195.39.55.20)


--- schema_init.orig    2009-01-22 01:01:03.000000000 +0100
+++ schema_init.c       2009-03-26 15:12:15.578125000 +0100
@@ -2814,6 +2814,7 @@ UUIDNormalize(

                } else {
                        slap_sl_free( normalized->bv_val, ctx );
+                       BER_BVZERO(normalized);
                        return LDAP_INVALID_SYNTAX;
                }

I encountered a crash in str2entry2() final cleanup. It turned out that it
called ordered_value_normalize(), which called UUIDNormalize(), which left the
value nonzero but already free-d.