https://bugs.openldap.org/show_bug.cgi?id=10135

          Issue ID: 10135
           Summary: dynlist (and maybe others) doesn't use the right
                    overinst context in callbacks
           Product: OpenLDAP
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: overlays
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

Running the test suite with `-fsanitize=address` picks up a bug in
https://git.openldap.org/openldap/openldap/-/blob/860b61f41dfeeb19cc0eb011f290561c68a13de3/servers/slapd/overlays/dynlist.c#L1681

Here, op->o_bd->bd_info isn't actually dynlist but mdb's own static bi, so
overlay_entry_get_ov then reaches into the void when reading on->on_info.

It's very likely that other places/overlays share the same bug as it is subtle
and doesn't get picked up immediately (slap_overinst embeds a BackendInfo and
oi_orig is not often set).

-- 
You are receiving this mail because:
You are on the CC list for the issue.

Reply via email to