From cea455691021da11bf780c4cf003b8ec4d70d204 Mon Sep 17 00:00:00 2001
From: Pierangelo Masarati <ando@openldap.org>
Date: Wed, 12 Dec 2001 07:56:17 +0000
Subject: [PATCH] allow empty suffix

---
 servers/slapd/dn.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/servers/slapd/dn.c b/servers/slapd/dn.c
index b9705ba950..3a7a2e8e3f 100644
--- a/servers/slapd/dn.c
+++ b/servers/slapd/dn.c
@@ -458,6 +458,14 @@ dn_issuffixbv(
 {
 	int	d = dn->bv_len - suffix->bv_len;
 
+	assert( dn );
+	assert( suffix );
+
+	/* empty suffix matches any dn */
+	if ( suffix->bv_len == 0 ) {
+		return 1;
+	}
+
 	/* suffix longer than dn */
 	if ( d < 0 ) {
 		return 0;
@@ -491,6 +499,9 @@ dn_issuffix(
 {
 	struct berval	bvdn, bvsuffix;
 
+	assert( dn );
+	assert( suffix );
+
 	bvdn.bv_val = (char *) dn;
 	bvdn.bv_len = strlen( dn );
 	bvsuffix.bv_val = (char *) suffix;