[389-devel] Please review: [Bug 640027] Naming attribute with a special char sequence parsing bug

Noriko Hosoi nhosoi at redhat.com
Tue Oct 5 23:26:30 UTC 2010



https://bugzilla.redhat.com/show_bug.cgi?id=640027

https://bugzilla.redhat.com/attachment.cgi?id=451775&action=diff
https://bugzilla.redhat.com/attachment.cgi?id=451775&action=edit

Description: When DN is made from RDNs containing escaped plus
"\+", the dn normalizer considers the value could be nested multi-
valued RDNs. (e.g., cn=C\=Z\+A\=X\+B\=Y\,o\=O,o=OO)
In that case, multi-valued RDNs are sorted by the normalizer.
(==>  cn=A\=X\+B\=Y\+C\=Z\,o\=O,o=OO)
The sample DN provided by Andrey Ivanov contains "\+", but that
is not a separator for the multi-valued RDNs:
   cn=mytest\+\=-123'\;456,dc=example,dc=com
The dn normalizer should have checked the possibility, as well.
The check is added in this patch.

Also, sorting was not triggered if multi-valued RDNs are located
at the end of the value. (e.g., cn=C\=X\,B\=Y\+A\=Z,o=OO)
The bug was fixed, as well.

File: ldap/servers/slapd/dn.c





More information about the 389-devel mailing list