https://bugs.openldap.org/show_bug.cgi?id=10264
Issue ID: 10264 Summary: libpdap leaks dummy_lr data on NoD processing Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: libraries Assignee: bugs@openldap.org Reporter: ondra@mistotebe.net Target Milestone: ---
When a NoD unsolicited response is being processed in try_read1msg, we use the dummy_lr on stack, but data copied onto it is never freed, so we leak it as we return.
https://bugs.openldap.org/show_bug.cgi?id=10264
Ondřej Kuzník ondra@mistotebe.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs@openldap.org |ondra@mistotebe.net Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS
--- Comment #1 from Ondřej Kuzník ondra@mistotebe.net --- https://git.openldap.org/openldap/openldap/-/merge_requests/724
https://bugs.openldap.org/show_bug.cgi?id=10264
Howard Chu hyc@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.5.19
https://bugs.openldap.org/show_bug.cgi?id=10264
Howard Chu hyc@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords|needs_review |
https://bugs.openldap.org/show_bug.cgi?id=10264
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED
--- Comment #2 from Quanah Gibson-Mount quanah@openldap.org --- head:
• 3f6cec3b by Ondřej Kuzník at 2024-10-02T13:23:44+01:00 ITS#10264 Free NoD data we stored locally
https://bugs.openldap.org/show_bug.cgi?id=10264
--- Comment #3 from Quanah Gibson-Mount quanah@openldap.org --- RE26:
• 90fc22ab by Ondřej Kuzník at 2024-11-12T17:44:17+00:00 ITS#10264 Free NoD data we stored locally
RE25:
• 39c97c8a by Ondřej Kuzník at 2024-11-12T17:45:03+00:00 ITS#10264 Free NoD data we stored locally