← Back to branch summary

~ubuntu-branches/ubuntu/hardy/openldap2.3/hardy-updates

« back to all changes in this revision

Viewing changes to servers/slapd/back-sql/search.c

  • Committer: Bazaar Package Importer
  • Author(s): Kees Cook
  • Date: 2008-07-31 16:06:53 UTC
  • mfrom: (16.1.3 hardy-proposed)
  • Revision ID: james.westby@ubuntu.com-20080731160653-np1dr19qfutmqb0v
Tags: 2.4.9-0ubuntu0.8.04.1
* SECURITY UPDATE: denial of service via broken BER decoding.
* Added debian/patches/security-ber-decoding.patch: upstream fixes.
* References
  CVE-2008-2952

Show diffs side-by-side

added added

removed removed

Lines of Context:
servers/slapd/back-sql/search.c
1
 
/* $OpenLDAP: pkg/ldap/servers/slapd/back-sql/search.c,v 1.117.2.6 2007/11/08 19:16:50 quanah Exp $ */
 
1
/* $OpenLDAP: pkg/ldap/servers/slapd/back-sql/search.c,v 1.117.2.8 2008/02/11 23:26:48 kurt Exp $ */
2
2
/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
3
3
 *
4
 
 * Copyright 1999-2007 The OpenLDAP Foundation.
 
4
 * Copyright 1999-2008 The OpenLDAP Foundation.
5
5
 * Portions Copyright 1999 Dmitry Kovalev.
6
6
 * Portions Copyright 2002 Pierangelo Masarati.
7
7
 * Portions Copyright 2004 Mark Adamson.
864
864
                struct berval   keyval;
865
865
#else /* ! BACKSQL_ARBITRARY_KEY */
866
866
                unsigned long   keyval;
867
 
                char            keyvalbuf[] = "18446744073709551615";
 
867
                char            keyvalbuf[LDAP_PVT_INTTYPE_CHARS(unsigned long)];
868
868
#endif /* ! BACKSQL_ARBITRARY_KEY */
869
869
 
870
870
                switch ( f->f_choice ) {