mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-03-07 14:18:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

ITS#9014 fix component match parsing errors

Browse Source
This commit is contained in:
Howard Chu 2020-12-01 21:29:19 +00:00
parent e394bcfa76
commit 6ae9bf167d
2 changed files with 12 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
servers/slapd/component.c
View File

@ -347,7 +347,7 @@ get_comp_filter( Operation* op, struct berval* bv,
return rc; return rc;
} }
rc = parse_comp_filter( op, &cav, filt, text ); rc = parse_comp_filter( op, &cav, filt, text );
bv->bv_val = cav.cav_ptr; /* bv->bv_val = cav.cav_ptr; */
return rc; return rc;
} }
@ -1067,7 +1067,7 @@ parse_comp_filter( Operation* op, ComponentAssertionValue* cav,
*/ */
ber_tag_t tag; ber_tag_t tag;
int err; int err = LDAP_SUCCESS;
ComponentFilter f; ComponentFilter f;
/* TAG : item, and, or, not in RFC 4515 */ /* TAG : item, and, or, not in RFC 4515 */
tag = strip_cav_tag( cav ); tag = strip_cav_tag( cav );
@ -1077,10 +1077,11 @@ parse_comp_filter( Operation* op, ComponentAssertionValue* cav,
return LDAP_PROTOCOL_ERROR; return LDAP_PROTOCOL_ERROR;
} }
if ( tag != LDAP_COMP_FILTER_NOT ) if ( tag != LDAP_COMP_FILTER_NOT ) {
strip_cav_str( cav, "{"); err = strip_cav_str( cav, "{");
if ( err )
err = LDAP_SUCCESS; goto invalid;
}
f.cf_next = NULL; f.cf_next = NULL;
f.cf_choice = tag; f.cf_choice = tag;
@ -1154,13 +1155,14 @@ parse_comp_filter( Operation* op, ComponentAssertionValue* cav,
break; break;
} }
invalid:
if ( err != LDAP_SUCCESS && err != SLAPD_DISCONNECT ) { if ( err != LDAP_SUCCESS && err != SLAPD_DISCONNECT ) {
*text = "Component Filter Syntax Error"; *text = "Component Filter Syntax Error";
return err; return err;
} }
if ( tag != LDAP_COMP_FILTER_NOT ) if ( tag != LDAP_COMP_FILTER_NOT )
strip_cav_str( cav, "}"); err = strip_cav_str( cav, "}");
if ( err == LDAP_SUCCESS ) { if ( err == LDAP_SUCCESS ) {
if ( op ) { if ( op ) {

3
servers/slapd/schema_init.c
View File

@ -327,6 +327,9 @@ certificateValidate( Syntax *syntax, struct berval *in )
ber_len_t len; ber_len_t len;
ber_int_t version = SLAP_X509_V1; ber_int_t version = SLAP_X509_V1;
if ( BER_BVISNULL( in ) || BER_BVISEMPTY( in ))
return LDAP_INVALID_SYNTAX;
ber_init2( ber, in, LBER_USE_DER ); ber_init2( ber, in, LBER_USE_DER );
tag = ber_skip_tag( ber, &len ); /* Signed wrapper */ tag = ber_skip_tag( ber, &len ); /* Signed wrapper */
if ( tag != LBER_SEQUENCE ) return LDAP_INVALID_SYNTAX; if ( tag != LBER_SEQUENCE ) return LDAP_INVALID_SYNTAX;