[Date Prev][Date Next]
(ITS#6799) back-meta may erroneously consider as candidates targets outside the scope of a search
- To: openldap-its@OpenLDAP.org
- Subject: (ITS#6799) back-meta may erroneously consider as candidates targets outside the scope of a search
- From: email@example.com
- Date: Wed, 19 Jan 2011 16:35:48 GMT
- Auto-submitted: auto-generated (OpenLDAP-ITS)
Full_Name: Pierangelo Masarati
Submission from: (NULL) (22.214.171.124)
Submitted by: ando
meta_back_is_candidate() marks as candidate any target whose suffix is
subordinate to the search request when the request has "subtree" scope. This in
principle can give false positives and could also give false negatives.
However, that piece of code is always exploited with a "subtree" scope,
regardless of the actual scope of the search. As a consequence, only false
positives can occur (which is harmless but may result in unnecessary activity).
The function meta_back_is_candidate() has been fixed to correctly manage all
conditions; when called during a search request, the actual scope is used, to
make sure only actual candidates are considered by search operations.