Quick (and expensive) fix to detect DNs with embedded NULs

servers/slapd/dn.c

@@ -470,6 +470,11 @@ dnPrettyNormal(
 		pretty->bv_len = 0;
 		normal->bv_len = 0;
 
+		/* FIXME: str2dn should take a bv and handle this */
+		if( strlen( val->bv_val ) != val->bv_len ) {
+			return LDAP_INVALID_SYNTAX;
+		}
+
 		/* FIXME: should be liberal in what we accept */
 		rc = ldap_str2dn( val->bv_val, &dn, LDAP_DN_FORMAT_LDAP );
 		if ( rc != LDAP_SUCCESS ) {