Re: OpenLDAP goes too deep with regex's (ITS#2174)

[Kurt@OpenLDAP.org]

At 11:01 AM 2002-11-11, Quanah Gibson-Mount wrote:
>Nov 11 10:48:33 ldap3.Stanford.EDU slapd[1851]: [ID 791166 local4.debug] <= test_filter 5

FALSE

>Nov 11 10:48:34 ldap3.Stanford.EDU slapd[1851]: [ID 791166 local4.debug] <= test_filter 6

TRUE

>Nov 11 10:48:34 ldap3.Stanford.EDU slapd[1851]: [ID 238222 local4.debug] <= test_filter_or 6


TRUE

>Nov 11 10:48:34 ldap3.Stanford.EDU slapd[1851]: [ID 791166 local4.debug] <= test_filter 6


TRUE

>So, even though it received the EQUALITY for krb5PrincipalName

The above shows the first EQUALITY match resulted in FALSE (5).

>, it did not short-circuit the search, and continued with a check for suKrb5Name.

and hence it did not short circuit the OR evaluation.

Kurt