mirror of
https://git.openldap.org/openldap/openldap.git
synced 2026-02-02 11:59:45 -05:00
ITS#10421 mdb_load: check for malicious input
This commit is contained in:
parent
270c543828
commit
46b33d2b45
1 changed files with 6 additions and 0 deletions
|
|
@ -208,6 +208,12 @@ badend:
|
|||
|
||||
c1 = buf->mv_data;
|
||||
len = strlen((char *)c1);
|
||||
if (!len) {
|
||||
/* This can only happen with an intentionally invalid input
|
||||
* with a NUL byte after the leading SPACE
|
||||
*/
|
||||
goto badend;
|
||||
}
|
||||
l2 = len;
|
||||
|
||||
/* Is buffer too short? */
|
||||
|
|
|
|||
Loading…
Reference in a new issue