NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commit0c98d0d

committed

Fix some null pointer dereferences in LDAP auth code

An LDAP URL without a host name such as "ldap://" or without a base DNsuch as "ldap://localhost" would cause a crash when reading pg_hba.conf.If no binddn is configured, an error message might end up trying to print anull pointer, which could crash on some platforms.Author: Thomas Munro <thomas.munro@enterprisedb.com>Reviewed-by: Michael Paquier <michael.paquier@gmail.com>

1 parent0e1539b commit0c98d0dCopy full SHA for 0c98d0d

File tree

2 files changed

-3

lines changed

src/backend/libpq
- auth.c
- hba.c

2 files changed

-3

lines changed

`‎src/backend/libpq/auth.c`

Lines changed: 2 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -2520,7 +2520,8 @@ CheckLDAPAuth(Port *port)`
`2520`	`2520`	`{`
`2521`	`2521`	`ereport(LOG,`
`2522`	`2522`	`(errmsg("could not perform initial LDAP bind for ldapbinddn \"%s\" on server \"%s\": %s",`
`2523`		`-port->hba->ldapbinddn,port->hba->ldapserver,`
	`2523`	`+port->hba->ldapbinddn ?port->hba->ldapbinddn :"",`
	`2524`	`+port->hba->ldapserver,`
`2524`	`2525`	`ldap_err2string(r)),`
`2525`	`2526`	`errdetail_for_ldap(ldap)));`
`2526`	`2527`	`ldap_unbind(ldap);`

`‎src/backend/libpq/hba.c`

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -1739,9 +1739,11 @@ parse_hba_auth_opt(char name, char val, HbaLine *hbaline,`
`1739`	`1739`	`return false;`
`1740`	`1740`	`}`
`1741`	`1741`
`1742`		`-hbaline->ldapserver=pstrdup(urldata->lud_host);`
	`1742`	`+if (urldata->lud_host)`
	`1743`	`+hbaline->ldapserver=pstrdup(urldata->lud_host);`
`1743`	`1744`	`hbaline->ldapport=urldata->lud_port;`
`1744`		`-hbaline->ldapbasedn=pstrdup(urldata->lud_dn);`
	`1745`	`+if (urldata->lud_dn)`
	`1746`	`+hbaline->ldapbasedn=pstrdup(urldata->lud_dn);`
`1745`	`1747`
`1746`	`1748`	`if (urldata->lud_attrs)`
`1747`	`1749`	`hbaline->ldapsearchattribute=pstrdup(urldata->lud_attrs[0]);/* only use first one */`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit0c98d0d

File tree

2 files changed

2 files changed

`‎src/backend/libpq/auth.c`

`‎src/backend/libpq/hba.c`

0 commit comments