[Issue 10493] change in 2.6.13 for ber_bvreplace_x introduces out of bounds reads

https://bugs.openldap.org/show_bug.cgi?id=10493

Howard Chu hyc@openldap.org changed:

What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=10438

--- Comment #1 from Howard Chu hyc@openldap.org --- It's a berval, it would be stupid to call strlen on it since the length is already given.

There is no possibility of an information leak across the network since all of the actual BER output functions use the bv_len. Stray garbage in log output is harmless and can't cause a crash.