From: Alexander Bainbridge-Sedivy <alex.bainbridge@inkbridge.io>
Date: Wed, 17 Jun 2026 16:12:31 +0000 (-0400)
Subject: lib/ldap/map: fix use-after-free in fr_ldap_map_getdn (freed vp appended on parse... 
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=63296393ffeed6f6a9c2c2fa4d4fdba332ac9bbc;p=thirdparty%2Ffreeradius-server.git

lib/ldap/map: fix use-after-free in fr_ldap_map_getdn (freed vp appended on parse failure)
---

diff --git a/src/lib/ldap/map.c b/src/lib/ldap/map.c
index 377116f16c6..38ef7b9b56f 100644
--- a/src/lib/ldap/map.c
+++ b/src/lib/ldap/map.c
@@ -223,6 +223,7 @@ static int fr_ldap_map_getdn(TALLOC_CTX *ctx, fr_pair_list_t *out, request_t *re
 		RPWDEBUG("Failed parsing value \"%pV\" for attribute %s", dn,
 				 tmpl_attr_tail_da(map->lhs)->name);
 		talloc_free(vp);
+		return 0;
 	}
 
 	fr_pair_append(out, vp);