From: Howard Chu <hyc@openldap.org>
Date: Mon, 14 Dec 2020 19:03:27 +0000 (+0000)
Subject: [PATCH] ITS#9424 fix serialNumberAndIssuerSerialCheck
X-Git-Tag: archive/raspbian/2.4.47+dfsg-3+rpi1+deb10u7^2~6
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=cdbd716b789a040288e88b0125727c9af7d614ec;p=openldap.git

[PATCH] ITS#9424 fix serialNumberAndIssuerSerialCheck


Gbp-Pq: Name ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
---

diff --git a/servers/slapd/schema_init.c b/servers/slapd/schema_init.c
index 5f3b2878..4527ea86 100644
--- a/servers/slapd/schema_init.c
+++ b/servers/slapd/schema_init.c
@@ -4289,7 +4289,7 @@ serialNumberAndIssuerSerialCheck(
 	if ( in->bv_len < 3 ) return LDAP_INVALID_SYNTAX;
 
 	/* no old format */
-	if ( in->bv_val[0] != '{' && in->bv_val[in->bv_len-1] != '}' ) return LDAP_INVALID_SYNTAX;
+	if ( in->bv_val[0] != '{' || in->bv_val[in->bv_len-1] != '}' ) return LDAP_INVALID_SYNTAX;
 
 	x.bv_val++;
 	x.bv_len -= 2;