New subject: [Issue 10455] Allow handling of empty group in memberof_saveMember_cb()

26 Feb 2026


      https://bugs.openldap.org/show_bug.cgi?id=10455
Issue ID: 10455
           Summary: Allow handling of empty group in
                    memberof_saveMember_cb()
           Product: OpenLDAP
           Version: 2.6.12
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: overlays
          Assignee: bugs@openldap.org
          Reporter: roger.j.meier@gmx.ch
  Target Milestone: ---
Created attachment 1117
  --> https://bugs.openldap.org/attachment.cgi?id=1117&action=edit
Protect e_attrs with a NULL pointer test instead of an assert() to allow empty
groups
In slapd/overlays/memberof.c, the callback
memberof_saveMember_cb()
uses two assert statements for the sr_entry and its e_attrs pointer in
sequence. This makes the service abort on an empty group.  If the use of
rs->sr_entry->e_attrs is just protected by a test of the e_attrs pointer, the
code does not abort and allows empty groups.
Please consider to add this patch to the official source.
It was now several month in production and did not lead to unexpected results.
-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 10455] New: Allow handling of empty group in memberof_saveMember_cb()