From ed4c10247c1af5d0ba41cf2a97d40bc2912e7e71 Mon Sep 17 00:00:00 2001
From: Howard Chu <hyc@openldap.org>
Date: Thu, 2 Feb 2012 03:08:33 -0800
Subject: [PATCH] ITS#7146 check for ad_index overflow
Temporary fix...
---
servers/slapd/back-mdb/id2entry.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/servers/slapd/back-mdb/id2entry.c b/servers/slapd/back-mdb/id2entry.c
index 40f816d2ac..cdc2e051a2 100644
--- a/servers/slapd/back-mdb/id2entry.c
+++ b/servers/slapd/back-mdb/id2entry.c
@@ -569,6 +569,11 @@ static int mdb_entry_encode(Operation *op, Entry *e, MDB_val *data, Ecount *eh)
ptr = (unsigned char *)(lp + eh->offset);
for (a=e->e_attrs; a; a=a->a_next) {
+ if (a->a_desc->ad_index >= MDB_MAXADS) {
+ Debug( LDAP_DEBUG_ANY, "mdb_entry_encode: too many AttributeDescriptions used\n",
+ 0, 0, 0 );
+ return LDAP_OTHER;
+ }
*lp++ = mdb->mi_adxs[a->a_desc->ad_index];
l = a->a_numvals;
if (a->a_nvals != a->a_vals)
--
GitLab