]> git.ipfire.org Git - thirdparty/openldap.git/commit
ITS#9045 Do not share cn=config entries with outside code
authorOndřej Kuzník <ondra@mistotebe.net>
Wed, 26 Oct 2022 14:55:18 +0000 (15:55 +0100)
committerQuanah Gibson-Mount <quanah@openldap.org>
Mon, 31 Oct 2022 18:16:42 +0000 (18:16 +0000)
commita6f3106afcf4324c11e85e2043116498b00d3f38
tree8669cc6b69583627b05c8e742c9356c2f8c3d705
parent2316927dc9ae7b0567ecd9b8282ae75e438c01e2
ITS#9045 Do not share cn=config entries with outside code

config_back_entry_get currently returns the entry directly without
securing the rwlock, which is unsafe. However we can't keep holding it
on return in case the caller decides to hold onto the entry
indefinitely, hence rlock+entry_dup+runlock.
servers/slapd/bconfig.c