upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-27 01:59:38 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

note about OpenSSL being more liberal than OpenLDAP when there is garbage past the end of a certificateList

Browse source
This commit is contained in:
Pierangelo Masarati 2009-08-03 14:07:49 +00:00
parent 8fc79e1116
commit 20371c3eae
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
servers/slapd/schema_init.c
View file

@ -337,6 +337,7 @@ certificateListValidate( Syntax *syntax, struct berval *in )
ber_skip_data( ber, len );
tag = ber_skip_tag( ber, &len );
/* Must be at end now */
/* NOTE: OpenSSL tolerates CL with garbage past the end */
if ( len || tag != LBER_DEFAULT ) return LDAP_INVALID_SYNTAX;
return LDAP_SUCCESS;
}