https://bugs.openldap.org/show_bug.cgi?id=9212

Bug ID: 9212 Summary: [2.5] entry_schema_check can leave text uninitialized Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs@openldap.org Reporter: ryan@openldap.org Target Milestone: ---

76df74dbeab47195e42946a474c3a5f8557c168d removed some important snprintfs in schema_check.c. Now we can get uninitialized data in *text for these cases. For example:

$ ./clients/tools/ldapmodify -H ldap://:9000 -x -D cn=admin,dc=example,dc=com -w secret dn: cn=test,dc=example,dc=com changetype: add objectclass: device

adding new entry "cn=test,dc=example,dc=com"

dn: cn=test,dc=example,dc=com add: sn sn: test

modifying entry "cn=test,dc=example,dc=com" ldap_modify: Object class violation (65) additional info: |

$ ./clients/tools/ldapmodify -H ldap://:9000 -x -D cn=admin,dc=example,dc=com -w secret dn: cn=test,dc=example,dc=com add: sn sn: test

modifying entry "cn=test,dc=example,dc=com" ldap_modify: Object class violation (65) additional info:

^[[?1;2c $