From: Ondřej Kuzník <ondra@mistotebe.net>
Date: Tue, 14 Jul 2026 11:21:04 +0000 (+0100)
Subject: ITS#10530 syncrepl: detect malformed SYNC_ID_SET messages
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5be169a7c497decbedccfd59bebb1fd29e7e3502;p=thirdparty%2Fopenldap.git

ITS#10530 syncrepl: detect malformed SYNC_ID_SET messages
---

diff --git a/servers/slapd/syncrepl.c b/servers/slapd/syncrepl.c
index 8b95368425..ba9fe28676 100644
--- a/servers/slapd/syncrepl.c
+++ b/servers/slapd/syncrepl.c
@@ -1995,7 +1995,7 @@ result_done:
 					syncUUIDs = NULL;
 					rc = ber_scanf( ber, "[W]", &syncUUIDs );
 					ber_scanf( ber, /*"{"*/ "}" );
-					if ( rc != LBER_ERROR ) {
+					if ( rc != LBER_ERROR && syncUUIDs ) {
 						if ( refreshDeletes ) {
 							syncrepl_del_nonpresent( op, si, syncUUIDs,
 								&syncCookie, m );
@@ -4146,6 +4146,10 @@ presentlist_insert(
 {
 	char *val;
 
+	if ( syncUUID->bv_len != UUIDLEN ) {
+		return 1;
+	}
+
 #ifdef HASHUUID
 	Avlnode **av;
 	unsigned short s;