denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ldap: Fix crash in case of empty LDAP response for CRL fetch

Browse Source 
In case of an empty LDAP result during a CRL fetch (for example, due to
a wrong filter attribute in the LDAP URI, or invalid LDAP configuration),
the call to ldap_result2error() with NULL value for "entry" lead to
a crash.

Closes strongswan/strongswan#52.
This commit is contained in:
Yannick CANN
2016-10-06 18:08:51 +02:00
committed by Tobias Brunner
parent bd815325a6
commit 5f97b73554
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/ldap/ldap_fetcher.c
+1 -2
View File
@@ -93,8 +93,7 @@ static bool parse(LDAP *ldap, LDAPMessage *result, chunk_t *response)
} }
else else
{ {
DBG1(DBG_LIB, "finding first LDAP entry failed: %s", DBG1(DBG_LIB, "finding first LDAP entry failed");
ldap_err2string(ldap_result2error(ldap, entry, 0)));
} }
return success; return success;
} }