Fix buffer overflow bug (ITS#1345)

This commit is contained in:
Kurt Zeilenga 2001-09-27 04:40:11 +00:00
parent be00f5ef24
commit 393b19b449
2 changed files with 8 additions and 6 deletions

View File

@ -1,6 +1,10 @@
OpenLDAP 2.0 Change Log
OpenLDAP 2.0.16 Engineering
Fixed CR/LF handling (ITS#1328)
Fixed slapd/slurpd max args bug (ITS#1343)
Fixed slurpd server down reject fix (ITS#1183)
Fixed -llber ber_realloc bug (ITS#1346)
OpenLDAP 2.0.15 Release
Fixed -lldap TLS external handling

View File

@ -34,8 +34,6 @@
#include "lber-int.h"
#define EXBUFSIZ 1024
static ber_slen_t
BerRead(
Sockbuf *sb,
@ -123,7 +121,7 @@ ber_write(
int
ber_realloc( BerElement *ber, ber_len_t len )
{
ber_len_t need, have, total;
ber_len_t total;
Seqorset *s;
long off;
char *oldbuf;
@ -134,9 +132,9 @@ ber_realloc( BerElement *ber, ber_len_t len )
assert( BER_VALID( ber ) );
total = ber_pvt_ber_total( ber );
have = total / EXBUFSIZ;
need = (len < EXBUFSIZ ? 1 : (len + (EXBUFSIZ - 1)) / EXBUFSIZ);
total = have * EXBUFSIZ + need * EXBUFSIZ;
#define EXBUFSIZ 1000
total += len < EXBUFSIZ ? EXBUFSIZ : len;
oldbuf = ber->ber_buf;