https://bugs.openldap.org/show_bug.cgi?id=10489
--- Comment #5 from Howard Chu hyc@openldap.org --- Thanks for the report. This code appears to have been introduced in 2009, commit bc20500e629e15f2bc937b4952ee1395872e3d4d
Fixed now in master 14f3e73301f84382356aacb5a22668e47e81a74a
In practice there doesn't appear to be any impact on slapd.
- `servers/slapd/cancel.c` — extended operation request data - `servers/slapd/passwd.c` — password modify request data - `servers/slapd/controls.c` — LDAP control values - `servers/slapd/schema_init.c` — DER-encoded attribute values
All of the buffers being referenced here came from liblber originally, and thus have an extra trailing NUL byte anyway.