[Fedora-directory-commits] ldapserver/ldap/servers/slapd ava.c, 1.6, 1.7

[Noriko Hosoi (nhosoi)]

Author: nhosoi

Update of /cvs/dirsec/ldapserver/ldap/servers/slapd
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30667

Modified Files:
	ava.c 
Log Message:
Resolves: #247725
Summary: rhds71 Invalid LDIF Syntax crashes directory server (comment #18)
Description: The problem was if an RDN ends with '\\', strcpy_special_undo 
did not check if there is no more character, and incremented the pointer 
beyond the end and accessed the address.



Index: ava.c
===================================================================
RCS file: /cvs/dirsec/ldapserver/ldap/servers/slapd/ava.c,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- ava.c	10 Nov 2006 23:45:40 -0000	1.6
+++ ava.c	11 Jul 2007 21:29:06 -0000	1.7
@@ -113,7 +113,7 @@
 strcpy_special_undo( char *d, const char *s )
 {
     const char *end = s + strlen(s);
-	for ( ; *s; s++ )
+	for ( ; s < end && *s; s++ )
 	{
 		switch ( *s )
 		{