Browse Source

Ticket 48372 - ASAN invalid write in dblayer.c

Bug Description:  During server start up we attempt to write 513 bytes to a
buffer that is only 512 bytes long.

Fix Description:  Increase the size of the buffer that sscanf writes into.

https://fedorahosted.org/389/ticket/48372

Author: wibrown

Review by: rmeggins (Thanks!)
William Brown 10 years ago
parent
commit
00513dbb4b
1 changed files with 2 additions and 2 deletions
  1. 2 2
      ldap/servers/slapd/back-ldbm/dblayer.c

+ 2 - 2
ldap/servers/slapd/back-ldbm/dblayer.c

@@ -5191,8 +5191,8 @@ static int read_metadata(struct ldbminfo *li)
     PRFileInfo64 prfinfo;
     int return_value = 0;
     PRInt32 byte_count = 0;
-    char attribute[512];
-    char value[128], delimiter;
+    char attribute[513];
+    char value[129], delimiter;
     int number = 0;
     dblayer_private *priv = (dblayer_private *)li->li_dblayer_private;