[PATCH] Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
authorThierry Bordaz <tbordaz@redhat.com>
Thu, 18 Aug 2022 11:37:47 +0000 (13:37 +0200)
committerAnton Gladky <gladk@debian.org>
Mon, 24 Apr 2023 04:08:15 +0000 (05:08 +0100)
commit82fc541423a2745e64df9c88444cca030dae5715
tree2e70fea03f61f7cdcb8a08fd46b69f082d3f840a
parent5ca00325c1d241c977c025a61288467eba1ffad3
[PATCH] Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)

Bug description:
        If the servers receives an invalid cookie without separator '#',
        it parses it into an empty cookie (Sync_Cookie) instead of a NULL
        cookie (failure).
        Later it sigsegv when using the empty cookie.

Fix description:
        If the parsing fails return NULL

relates: #5418

Reviewed by: Viktor Ashirov, Mark Reynolds, William Brown, Simon Pichugin (thanks !)

Gbp-Pq: Name CVE-2022-2850.patch
ldap/servers/plugins/sync/sync_util.c