]> git.ipfire.org Git - thirdparty/squid.git/commit
projects / thirdparty / squid.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 70a9b8e) | patch
digest_edirectory_auth: improved error handling
authorAmos Jeffries <squid3@treenet.co.nz>
Mon, 26 Nov 2012 08:35:13 +0000 (01:35 -0700)
committerAmos Jeffries <squid3@treenet.co.nz>
Mon, 26 Nov 2012 08:35:13 +0000 (01:35 -0700)
commit92167619dc8f409c69292eee3d93dedbc46cadde
tree9ba822c4a5ef5798366258e724962ad73bb994e8tree
parent70a9b8e514a02f95352de288368790b58a77ea7acommit | diff
digest_edirectory_auth: improved error handling

Malicious response from LDAP server can cause squid helper to crash.

Missing realm value returned from LDAP without error/missing value being
indicated in the response can lead to strcmp() using a NULL pointer.
 Extremely unlikely to happen in practice, but worth fixing.

 Detected by Coverity Scan. Issue 740399
helpers/digest_auth/eDirectory/ldap_backend.cc diff | blob | blame | history
Mirror of https://github.com/squid-cache/squid.git