CVSROOT:        /cvs
Module name:    src
Changes by:     t...@cvs.openbsd.org    2025/05/11 09:38:48

Modified files:
        usr.sbin/ldapd : auth.c ldape.c modify.c 

Log message:
Plug a few leaks after namespace_get()

This patch fixes several memory leaks in ldapd caused by missing calls
to ober_free_elements after using namespace_get. The namespace_get
function eventually calls ober_read_element, which allocates memory
for parsed BER elements.

The most significant leak happens during processing of bind requests
from non-root users in auth.c. The returned ber_element was not freed
after being processed.

Similar issues were found and fixed in ldape.c and modify.c. In these
cases, ber_element returned by namespace_get was also left unfreed.

>From Anton Kasimov

Reply via email to