https://bugs.openldap.org/show_bug.cgi?id=10544

Issue ID: 10544 Summary: slapd-bind parses the -B search URL but neither uses nor frees it Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: test suite Assignee: bugs@openldap.org Reporter: 1489378385@qq.com Target Milestone: ---

URL: https://github.com/openldap/openldap/blob/8afcbe9e04f1a40f03cea51c57418b05f8...

Description:

Source revision: 8afcbe9e04f1a40f03cea51c57418b05f86e8f44

Affected file: tests/progs/slapd-bind.c

Affected lines: 98, 116-143, and 182-190

Source-level observation:

When -B search=<LDAP URL> is supplied, ldap_url_parse() allocates an LDAPURLDesc and stores it in extra_ludp.

After parsing, extra_ludp is not referenced again. In particular, the calls to do_base() and do_bind() pass an action type of -1 and an action pointer of NULL instead of passing TESTER_SEARCH and extra_ludp.

The descriptor is also not released before exit(EXIT_SUCCESS).

Steps to verify:

1. Build slapd-bind with AddressSanitizer or LeakSanitizer. 2. Run slapd-bind with the required connection arguments and a valid option such as: -B 'search=ldap:///dc=example,dc=com??sub?(objectClass=*)' 3. Allow the tester to complete normally. 4. Check whether the requested search action is performed. 5. Inspect the sanitizer report for the LDAPURLDesc allocated by ldap_url_parse().

Actual result:

The URL is successfully parsed, but the resulting descriptor is neither used by the bind operation nor released before the process exits.

Expected result:

The parsed search action should be passed to the relevant test operation and the LDAPURLDesc should be released after the outer test loop completes.

Impact:

The -B search option appears to have no effect and leaves one LDAPURLDesc allocated until process termination.

Validation status:

Confirmed by source review at the revision above. Runtime behavior and sanitizer validation are pending.