Pierangelo Masarati wrote:

hyc@OpenLDAP.org wrote:

...

back-meta doesn't check the return code from the normalizer when it's normalizing the values of an attribute. As such, it can leave NULL slots in a->a_nvals even though a->a_vals slots are all non-NULL.

I was going to try just dup'ing the a->a_vals value into the slot, but I see that in back-ldap for the same situation, the entire attribute is just dropped. I suppose that's the safer path.

In the spirit of doing what's best to return as much as possible, wouldn't it be preferable to just drop illegal values? And, of course, the whole attr if no legal values are left.

Looking over the code, there are some other problems. Other areas will drop values for various reasons (e.g., mapping out objectclass values). attr->a_numvals is set before these checks occur, and is not updated with the correct count later.

I'll try to get some more fixes in for .15.