identification: Properly check length before comparing for binary DN equality
Fixes CVE-2013-6075.
This commit is contained in:
committed by
Andreas Steffen
parent
ed3eb62723
commit
7f4a13fffb
@@ -602,7 +602,7 @@ static bool compare_dn(chunk_t t_dn, chunk_t o_dn, int *wc)
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
/* try a binary compare */
|
/* try a binary compare */
|
||||||
if (memeq(t_dn.ptr, o_dn.ptr, t_dn.len))
|
if (chunk_equals(t_dn, o_dn))
|
||||||
{
|
{
|
||||||
return TRUE;
|
return TRUE;
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user