From: Ondřej Kuzník <ondra@openldap.org>
Date: Thu, 21 Jun 2018 15:01:43 +0000 (+0100)
Subject: ITS#8842 Do some printability checks on the dc RDN
X-Git-Tag: OPENLDAP_REL_ENG_2_4_47~43
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=849f937d0aaf5911d438c49ccde2b036b62362d5;p=thirdparty%2Fopenldap.git

ITS#8842 Do some printability checks on the dc RDN
---

diff --git a/libraries/libldap/getdn.c b/libraries/libldap/getdn.c
index 16ecd30553..69ff62ac8e 100644
--- a/libraries/libldap/getdn.c
+++ b/libraries/libldap/getdn.c
@@ -27,6 +27,7 @@
 
 #include "ldap-int.h"
 #include "ldap_schema.h"
+#include "ldif.h"
 
 /* extension to UFN that turns trailing "dc=value" rdns in DNS style,
  * e.g. "ou=People,dc=openldap,dc=org" => "People, openldap.org" */
@@ -2478,6 +2479,11 @@ dn2domain( LDAPDN dn, struct berval *bv, int pos, int *iRDN )
 			break;
 		}
 
+		if ( ldif_is_not_printable( ava->la_value.bv_val, ava->la_value.bv_len ) ) {
+			domain = 0;
+			break;
+		}
+
 		domain = 1;
 		
 		if ( first ) {