Bug 684035 - NULL dereferences in openldap-nss-non-blocking.patch
Summary: NULL dereferences in openldap-nss-non-blocking.patch
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: openldap
Version: 6.1
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: rc
: ---
Assignee: Jan Vcelak
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-03-10 22:49 UTC by Kamil Dudka
Modified: 2013-03-04 01:28 UTC (History)
5 users (show)

Fixed In Version: openldap-2.4.23-13.el6
Doc Type: Bug Fix
Doc Text:
- rebased OpenLDAP installed - possible NULL pointer dereference in patch we introduced (openldap-nss-non-blocking.patch) could cause Segmentation Fault when working with TLS - patch was updated - openldap-nss-non-blocking.patch does not add NULL pointer dereference
Clone Of:
Environment:
Last Closed: 2011-05-19 14:00:03 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:0673 0 normal SHIPPED_LIVE openldap bug fix and enhancement update 2011-05-18 18:10:44 UTC

Description Kamil Dudka 2011-03-10 22:49:28 UTC 
Description of problem:
--- a/openldap-2.4.23/libraries/libldap/tls_m.c
+++ b/openldap-2.4.23/libraries/libldap/tls_m.c
@@ -2284,7 +2284,7 @@ tlsm_is_non_ssl_message
    }

    if ( p->firsttag == LBER_SEQUENCE ) {
-       if ( *thebyte ) {
+       if ( thebyte ) {
            *thebyte = p->firsttag;
        }
        return 1;
@@ -2781,7 +2781,7 @@ tlsm_PR_GetSocketOption
    struct tls_data     *p;
    p = tlsm_get_pvt_tls_data( fd );

-   if ( !data ) {
+   if ( !p || !data ) {
        return PR_FAILURE;
    }


Version-Release number of selected component (if applicable):
openldap-2.4.23-9.el6
Comment 9 Jan Vcelak 2011-04-20 17:25:12 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
- rebased OpenLDAP installed
- possible NULL pointer dereference in patch we introduced (openldap-nss-non-blocking.patch) could cause Segmentation Fault when working with TLS
- patch was updated
- openldap-nss-non-blocking.patch does not add NULL pointer dereference
Comment 10 errata-xmlrpc 2011-05-19 14:00:03 UTC 
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0673.html
Note You need to log in before you can comment on or make changes to this bug.