mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-01-12 10:54:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

check conn->c_listener before use (hack to fix ITS#2361; need to review this part of slapi)

Browse Source
This commit is contained in:
Pierangelo Masarati 2003-03-10 22:19:32 +00:00
parent 40454ccec8
commit 11c225d40c
2 changed files with 12 additions and 3 deletions
servers/slapd
acl.cbackend.c

9
servers/slapd/acl.c
View File

@ -750,6 +750,15 @@ dn_match_cleanup:;
#endif
if ( !ber_bvccmp( &b->a_sockurl_pat, '*' ) ) {
/*
* FIXME: conn->c_listener can be null
* if the connection is faked (e.g. by
* slapi)
*/
if ( conn->c_listener == NULL ) {
continue;
}
if ( b->a_sockurl_style == ACL_STYLE_REGEX) {
if (!regex_matches( &b->a_sockurl_pat, conn->c_listener_url.bv_val,
e->e_ndn, matches ) )

6
servers/slapd/backend.c
View File

@ -967,7 +967,7 @@ backend_check_restrictions(
}
#ifdef SLAP_X_LISTENER_MOD
if ( ! ( conn->c_listener->sl_perms & S_IWUSR ) ) {
if ( conn->c_listener && ! ( conn->c_listener->sl_perms & S_IWUSR ) ) {
/* no "w" mode means readonly */
*text = "modifications not allowed on this listener";
return LDAP_UNWILLING_TO_PERFORM;
@ -1026,7 +1026,7 @@ backend_check_restrictions(
#ifdef SLAP_X_LISTENER_MOD
if ( !starttls && op->o_dn.bv_len == 0 ) {
if ( ! ( conn->c_listener->sl_perms & S_IXUSR ) ) {
if ( conn->c_listener && ! ( conn->c_listener->sl_perms & S_IXUSR ) ) {
/* no "x" mode means bind required */
*text = "bind required on this listener";
return LDAP_STRONG_AUTH_REQUIRED;
@ -1034,7 +1034,7 @@ backend_check_restrictions(
}
if ( !starttls && !updateop ) {
if ( ! ( conn->c_listener->sl_perms & S_IRUSR ) ) {
if ( conn->c_listener && ! ( conn->c_listener->sl_perms & S_IRUSR ) ) {
/* no "r" mode means no read */
*text = "read not allowed on this listener";
return LDAP_UNWILLING_TO_PERFORM;