upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-06-09 00:32:08 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#10476 Escape asserted value before pasting into filter

Browse source
This commit is contained in:
Ondřej Kuzník 2026-04-07 16:23:23 +01:00 committed by Quanah Gibson-Mount
parent 15501baeab
commit 2028cb4736
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
servers/slapd/overlays/pcache.c
View file

@ -2688,8 +2688,8 @@ pc_bind_attrs( Operation *op, Entry *e, QueryTemplate *temp,
for ( i=0; i<temp->bindnattrs; i++ ) {
a = attr_find( e->e_attrs, temp->bindfattrs[i] );
if ( a && a->a_vals ) {
vals[i] = a->a_vals[0];
len += a->a_vals[0].bv_len;
filter_escape_value( &a->a_vals[0], &vals[i] );
len += vals[i].bv_len;
} else {
vals[i] = pres;
}
@ -2710,6 +2710,12 @@ pc_bind_attrs( Operation *op, Entry *e, QueryTemplate *temp,
p1++;
}
*p2 = '\0';
for ( i=0; i<temp->bindnattrs; i++ ) {
if ( vals[i].bv_val != pres.bv_val ) {
ch_free( vals[i].bv_val );
}
}
op->o_tmpfree( vals, op->o_tmpmemctx );
/* FIXME: are we sure str2filter_x can't fail?