This was already reported upstream as <http://www.openldap.org/its/index.cgi/?findid=5315> and fixed in HEAD. It will be in the 2.4.8 release.

Update of /repo/OpenLDAP/pkg/ldap/libraries/libldap

Modified Files:
        pagectrl.c  1.9 -> 1.10

Log Message:
Corrected memory allocation for cookie (ITS#5315)


--Quanah

--On February 9, 2008 4:47:27 PM +0100 Arthur de Jong <[EMAIL PROTECTED]> wrote:

Subject: libldap-2.4-2: ldap_parse_page_control() allocates wrong amount
of memory Package: libldap-2.4-2
Version: 2.4.7-4
Severity: important
Tags: patch

I was in the process of trying to get rid of LDAP_DEPRECATED when I ran
into the following. In the ldap_parse_page_control() function in
libraries/libldap/pagectrl.c the wrong amount of memory is allocated for
the returned cookie.

Attached is a patch that should point out and fix the issue. I have
tested with valgrind to confirm that this is a problem (wth the patch
applied the errors reported by valgrind disappear).

Btw. Is there any usable documentation available for using the OpenLDAP
library apart from reading through the source code? I'm trying to get my
code (nss-ldapd) to work without LDAP_DEPRECATED and it is taking a lot
of time.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages libldap-2.4-2 depends on:
ii  libc6                 2.7-6              GNU C Library: Shared
libraries ii  libgnutls13           2.0.4-1            the GNU TLS
library - runtime libr ii  libsasl2-2            2.1.22.dfsg1-17+b1 Cyrus
SASL - authentication abstra

libldap-2.4-2 recommends no packages.

-- no debconf information

--
-- arthur - [EMAIL PROTECTED] - http://people.debian.org/~adejong --



--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to