[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
RE: Attribute Name Length Bounds
> -----Original Message-----
> From: owner-ietf-ldapbis@OpenLDAP.org
> [mailto:owner-ietf-ldapbis@OpenLDAP.org]On Behalf Of Chris Apple
> That's an accurate example of what I observed.
>
> The implementer is aware of the issue.
>
> I do see your point that this might be considered
> a bug.
>
> I also think that the fact that this bug can exist
> is a result of an ambiguity in the LDAPv3 proposed
> standard specs.
> Either interpretation is arguably correct given the state of
> the currently published proposed standards documents for
> LDAPv3. Thus implementers choosing either strategy are correct
> when they claim compliance with the specs.
????? If I send an ASN.1 encoded message to a server, and the server
arbitrarily truncates the end off any of the several length-encoded fields
of the message while processing it, the server has corrupted the message. I
don't see how you can possibly interpret this as correct behavior in the
server.
-- Howard Chu
Chief Architect, Symas Corp. Director, Highland Sun
http://www.symas.com http://highlandsun.com/hyc
Symas: Premier OpenSource Development and Support