[Pkg-openldap-devel] Bug#464877: libldap-2.4-2: ldap_parse_page_control() allocates wrong amount of memory

Arthur de Jong adejong at debian.org
Sat Feb 9 15:47:27 UTC 2008


Subject: libldap-2.4-2: ldap_parse_page_control() allocates wrong amount of memory
Package: libldap-2.4-2
Version: 2.4.7-4
Severity: important
Tags: patch

I was in the process of trying to get rid of LDAP_DEPRECATED when I ran
into the following. In the ldap_parse_page_control() function in
libraries/libldap/pagectrl.c the wrong amount of memory is allocated for
the returned cookie.

Attached is a patch that should point out and fix the issue. I have
tested with valgrind to confirm that this is a problem (wth the patch
applied the errors reported by valgrind disappear).

Btw. Is there any usable documentation available for using the OpenLDAP
library apart from reading through the source code? I'm trying to get my
code (nss-ldapd) to work without LDAP_DEPRECATED and it is taking a lot
of time.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages libldap-2.4-2 depends on:
ii  libc6                 2.7-6              GNU C Library: Shared libraries
ii  libgnutls13           2.0.4-1            the GNU TLS library - runtime libr
ii  libsasl2-2            2.1.22.dfsg1-17+b1 Cyrus SASL - authentication abstra

libldap-2.4-2 recommends no packages.

-- no debconf information

-- 
-- arthur - adejong at debian.org - http://people.debian.org/~adejong --
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openldap-pagectrl-alloc-fix.patch
Type: text/x-patch
Size: 478 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20080209/1edf2769/attachment.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20080209/1edf2769/attachment.pgp 


More information about the Pkg-openldap-devel mailing list