[Issue 9578] New: Buffer overflow at libraries/libldap/ldif.c:907 (ldif_read_record)

[openldap-its]

https://bugs.openldap.org/show_bug.cgi?id=9578

          Issue ID: 9578
           Summary: Buffer overflow at libraries/libldap/ldif.c:907
                    (ldif_read_record)
           Product: OpenLDAP
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: ---
         Component: libraries
          Assignee: b...@openldap.org
          Reporter: grap...@gmail.com
  Target Milestone: ---

Created attachment 827
  --> https://bugs.openldap.org/attachment.cgi?id=827&action=edit
fix

libraries/libldap/ldif.c:829
>  /* Squash \r\n to \n */
>  if ( len > 1 && line[len-2] == '\r' ) {
>    len--;
>    line[len-1] = '\n';
>  }
may cause buffer overflow at

libraries/libldap/ldif.c:907
> strcpy( *bufp + lcur, line );

-- 
You are receiving this mail because:
You are on the CC list for the issue.