From: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Date: Sat, 19 Dec 2020 23:17:56 +0000 (+1300)
Subject: tldap: avoid infinite loop when filter contains "\)"
X-Git-Tag: tevent-0.16.0~1085
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f0e0ff262ab720e2e0cd48aa82549ad9c5ed69ec;p=thirdparty%2Fsamba.git

tldap: avoid infinite loop when filter contains "\)"

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14600

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/source3/lib/tldap.c b/source3/lib/tldap.c
index 1fdd286b55a..2eed3a9fa99 100644
--- a/source3/lib/tldap.c
+++ b/source3/lib/tldap.c
@@ -1238,6 +1238,7 @@ static char *tldap_get_val(TALLOC_CTX *memctx,
 	while (*s) {
 		s = strchr(s, ')');
 		if (s && (*(s - 1) == '\\')) {
+			s++;
 			continue;
 		}
 		break;