https://bugs.openldap.org/show_bug.cgi?id=9922
Issue ID: 9922 Summary: Uninitialized value reading in clients/tools/common.c:tool_bind() Product: OpenLDAP Version: 2.6.3 Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: client tools Assignee: bugs@openldap.org Reporter: dpa-openldap@aegee.org Target Milestone: ---
One possible flow in https://git.openldap.org/openldap/openldap/-/blob/master/clients/tools/commo... is:
int err; if ( result ) { rc = ldap_parse_result( ld, result, &err, &matched, &info, &refs, &ctrls, 1 ); if ( rc != LDAP_SUCCESS ) { tool_perror( "ldap_bind parse result", rc, NULL, matched, info, refs ); tool_exit( ld, LDAP_LOCAL_ERROR ); } }
if ( err != LDAP_SUCCESS …
When result is NULL, err is not initialized, and the last line reads uninitialized value.