https://bugs.openldap.org/show_bug.cgi?id=10089

          Issue ID: 10089
           Summary: regex that does not pass `regtest()` causes the entire
                    process to exit
           Product: OpenLDAP
           Version: 2.6.6
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: slapd
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

There are 6 locations in `aclparse.c` in the function `parse_acl()` that call
`regtest()` validating a regex expression before its use.  Currently, when
`regtest()` finds an issue it calls `exit()` and the process must be restarted.
 It seems that a better approach would be to allow the failures to be processed
by the caller where the severity might be better understood.  In some (most?)
cases it's likely just fine for the process to continue after some information
about the issue is logged and resources are released properly.

https://git.openldap.org/openldap/openldap/-/blob/master/servers/slapd/aclparse.c#L175

-- 
You are receiving this mail because:
You are on the CC list for the issue.

Reply via email to