Version 1.2.10 segfaults on start up if an ACI has an bad DN. The segmentation fault occurs during the parsing of the ACI in function __aclp__copy_normalized_str. I tracked the defect to this commit:
http://git.fedorahosted.org/git/?p=389/ds.git;a=commitdiff;h=f6397113666f06848412bb12f754f04258cfa5fa
A bad DN can will make the DN normalization fail which is not tested any more. I am attaching a trivial patch that tests for this case and returns -1 when the normalization failed, thus restoring the previous behaviour of the function.
attachment 0001-Bug-361-Bad-DNs-in-ACIs-can-segfault-ns-slapd.patch
Thanks!
To ssh://git.fedorahosted.org/git/389/ds.git 197a8f5..8ba2982 master -> master commit changeset:8ba2982/389-ds-base Author: Charles Lopes clopes@amazon.com Date: Tue May 8 15:37:59 2012 +0000 To ssh://git.fedorahosted.org/git/389/ds.git c89ea2f..58ec62b 389-ds-base-1.2.11 -> 389-ds-base-1.2.11 commit changeset:58ec62b/389-ds-base To ssh://git.fedorahosted.org/git/389/ds.git 2bead40..e5bdf55 389-ds-base-1.2.10 -> 389-ds-base-1.2.10 commit changeset:e5bdf55/389-ds-base
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=822700
Added initial screened field value.
Metadata Update from @nkinder: - Issue assigned to rmeggins - Issue set to the milestone: 1.2.11.4
389-ds-base is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in 389-ds-base's github repository.
This issue has been cloned to Github and is available here: - https://github.com/389ds/389-ds-base/issues/361
If you want to receive further updates on the issue, please navigate to the github issue and click on subscribe button.
subscribe
Thank you for understanding. We apologize for all inconvenience.
Metadata Update from @spichugi: - Issue close_status updated to: wontfix (was: Fixed)
Login to comment on this ticket.