Re: (ITS#5817) ldapadd crashes with '-' in input

[ando@sys-net.it]

Jan Safranek wrote:
> Pierangelo Masarati wrote:
>> I've applied a fix to HEAD code, please test.
> 
> Thanks for a quick fix! Now it prints "ldap_add: Bad parameter to an 
> ldap routine (-9)", which is a bit better than the assert before.

Yes.  I modified ldap_add_ext(3) to further validate input parameters 
instead of crashing.  ldapadd(1) needs work in order to intercept the 
issue earlier and complain as appropriate.  I was more concerned by 
libldap because it might be used in more critical applications than 
ldapadd(1) itself.

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------