https://bugs.openldap.org/show_bug.cgi?id=10610
Issue ID: 10610 Summary: If double free if ldapi: socket name is too long Product: OpenLDAP Version: 2.6.14 Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: slapd Assignee: bugs@openldap.org Reporter: ondra@mistotebe.net Target Milestone: ---
slap_get_listener_addresses() frees the *sal on error and then its caller does the same. slap_get_listener_addresses() should just zero it afterwards? Also the error message lacks a trailing newline.
https://bugs.openldap.org/show_bug.cgi?id=10610
Ondřej Kuzník ondra@mistotebe.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs@openldap.org |ondra@mistotebe.net Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0 |1
--- Comment #1 from Ondřej Kuzník ondra@mistotebe.net --- Fixed in master (301722e84eb3337ea971825ed6a53e8744f29211)
https://bugs.openldap.org/show_bug.cgi?id=10610
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.6.16 Status|IN_PROGRESS |RESOLVED Keywords|needs_review | Resolution|--- |TEST
--- Comment #2 from Quanah Gibson-Mount quanah@openldap.org --- head:
• 301722e8 by Ondřej Kuzník at 2026-09-29T12:51:42+01:00 ITS#10610 daemon: fix ldapi:// error handling
https://bugs.openldap.org/show_bug.cgi?id=10610
--- Comment #3 from Quanah Gibson-Mount quanah@openldap.org --- RE26:
557141bc by Ondřej Kuzník at 2026-10-01T23:40:13+00:00
ITS#10610 daemon: fix ldapi:// error handling
RE27:
50ef9df0 by Ondřej Kuzník at 2026-10-01T23:39:06+00:00
ITS#10610 daemon: fix ldapi:// error handling