Skip to content

ext/ldap: Fix GH-16032 (Various NULL pointer dereferencements in ldap_modify_batch()) #16057

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 2 commits into from

Conversation

Girgias
Copy link
Member

@Girgias Girgias commented Sep 25, 2024

No description provided.

Copy link
Member

@nielsdos nielsdos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This seems right, but wow this is confusing code. I also love how it for example seems to validate (and fetch) modtype twice...

@Girgias
Copy link
Member Author

Girgias commented Sep 25, 2024

Yeah, the code is confusing, hopefully #16033 would make this clearer.

I'll fix the test issues shown by CI (as I haven't set up an LDAP server locally as I'm not exactly sure how to do that).

@nielsdos
Copy link
Member

The conditions need to be outside the inner loop

Ah right I had missed this as well...

@Girgias
Copy link
Member Author

Girgias commented Sep 25, 2024

The conditions need to be outside the inner loop

Ah right I had missed this as well...

To be fair, the code is convoluted :D

@Girgias Girgias closed this in f4c45ee Sep 25, 2024
@Girgias Girgias deleted the ldap-8.2-null-dereferencement branch September 25, 2024 22:28
jorgsowa pushed a commit to jorgsowa/php-src that referenced this pull request Oct 1, 2024
…dap_modify_batch())

We check that the "attrib" and "modtype" keys are present in each array.
If not we throw a ValueError, in line with what other validation failure cases do.

Closes phpGH-16057
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants