From: Ondřej Kuzník <ondra@mistotebe.net>
Date: Wed, 31 Aug 2022 12:53:13 +0000 (+0100)
Subject: ITS#6035 Plug olcAuthIDRewrite cn=config leak
X-Git-Tag: OPENLDAP_REL_ENG_2_5_14~91
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1b80eb427fdd949980449c9b93365ab162c0a25d;p=thirdparty%2Fopenldap.git

ITS#6035 Plug olcAuthIDRewrite cn=config leak
---

diff --git a/servers/slapd/saslauthz.c b/servers/slapd/saslauthz.c
index 797f2873fe..181f40f6b5 100644
--- a/servers/slapd/saslauthz.c
+++ b/servers/slapd/saslauthz.c
@@ -1423,8 +1423,9 @@ int slap_sasl_rewrite_delete( int valx ) {
 		return 1;
 	}
 
+	i = valx;
 	ber_memfree( authz_rewrites[ i ].bv_val );
-	for ( i = valx; !BER_BVISNULL( &authz_rewrites[ i + 1 ] ); i++ )
+	for ( ; !BER_BVISNULL( &authz_rewrites[ i + 1 ] ); i++ )
 	{
 		authz_rewrites[ i ] = authz_rewrites[ i + 1 ];
 	}