]> git.ipfire.org Git - thirdparty/curl.git/commit
openldap: limit max incoming size
authorDaniel Stenberg <daniel@haxx.se>
Thu, 16 Oct 2025 19:47:42 +0000 (21:47 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Thu, 16 Oct 2025 20:23:37 +0000 (22:23 +0200)
commitf91be14bfb79021e3b9ba769955c1f2c4351e9bf
tree8a49ec0595228a014e16b43ff9c372479ac007b5
parentda06621d617ab498a989afe75b7c2a4193d619e4
openldap: limit max incoming size

Set the maximum allowed size of an incoming LDAP message, which to
OpenLDAP means that it allows malloc() up to this size. If not set,
there is no limit and we instead risk a malloc() failure.

The limit is arbitrarily set to 256K as I can't figure out what a
reasonable value should be.

OpenLDAP docs: https://openldap.org/software/man.cgi?query=lber-sockbuf&apropos=0&sektion=0&manpath=OpenLDAP+2.6-Release&arch=default&format=html

Bug: https://issues.oss-fuzz.com/issues/432441303
Closes #19087
lib/openldap.c