[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#8385) Use After Free of struct ldap_common in slap_client_connect

> Thanks for the report. Inspection shows that the issue only exists in
> libldap's GnuTLS support. As always, the Project recommends you use OpenSSL.
>
> It also looks like only the ldo_tls_require_cert field is being used so we can
> probably just copy that flag instead of keeping a pointer to the ldap options
> structure.
>
Fixed now in git master.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/