https://bugs.openldap.org/show_bug.cgi?id=10343

          Issue ID: 10343
           Summary: Potential Memory Leak in function
                    slap_uuidstr_from_normalized
           Product: OpenLDAP
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: slapd
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

Created attachment 1070
  --> https://bugs.openldap.org/attachment.cgi?id=1070&action=edit
Patch: Change 1 to -1.

In function slap_uuidstr_from_normalized, the code allocates a new `struct
berval` with

```c
new = (struct berval *)slap_sl_malloc(sizeof(struct berval), ctx);
```

and then attempt to allocate `new->bv_val`. If that second allocation fails, it
sets `rc = 1` and jumps to the `done` cleanup label. However, the cleanup code
only runs when `rc == -1`, so the memory pointed by `new` is never freed,
causing a memory leak.

-- 
You are receiving this mail because:
You are on the CC list for the issue.

Reply via email to