]> git.ipfire.org Git - thirdparty/openldap.git/commit
ITS#9045 Do not share cn=config entries with outside code
authorOndřej Kuzník <ondra@mistotebe.net>
Wed, 26 Oct 2022 14:55:18 +0000 (15:55 +0100)
committerQuanah Gibson-Mount <quanah@openldap.org>
Tue, 1 Nov 2022 17:07:15 +0000 (17:07 +0000)
commitce7a7997833326e3a9fb363b7fb10afe02b7d192
tree1cf393f73560d5b79a5f7b1c9a25332ac3e606d9
parent49231ba91792f6a6e6d5329bcef6129ada23d578
ITS#9045 Do not share cn=config entries with outside code

config_back_entry_get currently returns the entry directly without
securing the rwlock, which is unsafe. However we can't keep holding it
on return in case the caller decides to hold onto the entry
indefinitely, hence rlock+entry_dup+runlock.
servers/slapd/bconfig.c