-
Notifications
You must be signed in to change notification settings - Fork 135
Open
Description
Passing a dict as attrlist to search_s() will result in memory corruption.
See:
python-ldap/Modules/LDAPObject.c
Line 291 in 3957526
| len = PySequence_Length(attrlist); |
len = PySequence_Length(attrlist); // len = -1
...
attrs[len] = NULL; // Out-of-bounds write
Replacing attrlist with seq will fix the problem:
len = PySequence_Length(seq);
Metadata
Metadata
Assignees
Labels
No labels