ITS#5352

CHANGES

@@ -23,6 +23,7 @@ OpenLDAP 2.4.8 Engineering
 	Fixed slapd NULL set values (ITS#5286)
 	Fixed slapd segv with SASL/OTP (ITS#5259)
 	Fixed slapd cn=config crash on delete (ITS#5343)
+	Fixed slapd cn=config global acls (ITS#5352)
 	Fixed slapd str2entry with no attrs (ITS#5308)
 	Fixed slapd-bdb segv with bdb4.6 (ITS#5322)
 	Fixed slapd-bdb modrdn to same dn (ITS#5319)

servers/slapd/bconfig.c

@@ -940,7 +940,12 @@ config_generic(ConfigArgs *c) {
 			AccessControl *a;
 			char *src, *dst, ibuf[11];
 			struct berval bv, abv;
-			for (i=0, a=c->be->be_acl; a; i++,a=a->acl_next) {
+			AccessControl *end;
+			if ( c->be == frontendDB )
+				end = NULL;
+			else
+				end = frontendDB->be_acl;
+			for (i=0, a=c->be->be_acl; a && a != end; i++,a=a->acl_next) {
 				abv.bv_len = snprintf( ibuf, sizeof( ibuf ), SLAP_X_ORDERED_FMT, i );
 				if ( abv.bv_len >= sizeof( ibuf ) ) {
 					ber_bvarray_free_x( c->rvalue_vals, NULL );