From 5750b8d6e1f8ff93276bb422e8e1ffe44dfbcf3c Mon Sep 17 00:00:00 2001 From: Michael Adam Date: Fri, 22 May 2009 11:58:00 +0200 Subject: [PATCH] s3:winbind:idmap_ldap: fix a crash bug in idmap_ldap_unixids_to_sids (#6387) This fixes a crash bug hit when multiple mappings were found by the ldap search. This crash was caused by an ldap asssertion in ldap_next_entry because was set to NULL in each iteration. The corresponding fix was applied to the idmap_ldap_sids_to_unixids() by Jerry in 2007 (b066668b74768d9ed547f16bf7b6ba6aea5df20a). This fixes the crash part of bug #6387. There is a logic part, too: The problem currently only occurs when multiple mappings are found for one given unixid. Now winbindd does not crash any more but it does not correctly handle this situation. It just returns the last mapping from the ldap search results. This needs fixing. Michael (cherry picked from commit e9010fa366746ec1ae948dbcf3493d446e23b14c) Signed-off-by: Michael Adam (cherry picked from commit 15652ee4259201a6d794c735d7e81631338f1050) --- source/winbindd/idmap_ldap.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/winbindd/idmap_ldap.c b/source/winbindd/idmap_ldap.c index 53f63103b1d..d4bf65bb58e 100644 --- a/source/winbindd/idmap_ldap.c +++ b/source/winbindd/idmap_ldap.c @@ -893,6 +893,7 @@ static NTSTATUS idmap_ldap_unixids_to_sids(struct idmap_domain *dom, TALLOC_CTX *memctx; struct idmap_ldap_context *ctx; LDAPMessage *result = NULL; + LDAPMessage *entry = NULL; const char *uidNumber; const char *gidNumber; const char **attr_list; @@ -988,7 +989,6 @@ again: } for (i = 0; i < count; i++) { - LDAPMessage *entry = NULL; char *sidstr = NULL; char *tmp = NULL; enum id_type type; -- 2.11.4.GIT