Menu

#2270 imm: Missing check for SaString attributes with ATTR_DN flag

5.0.2
fixed
None
defect
imm
nd
major
2017-01-25
2017-01-18
Hung Nguyen
No

A combination of SA_IMM_ATTR_SASTRINGT and SA_IMM_ATTR_DN should be treated as SA_IMM_ATTR_SANAMET.
Some places in IMM code miss the check for SaStringT

Example:

ImmModel::rtObjectCreate()
        } else if (attrValues->n.attrValueType == SA_IMM_ATTR_SANAMET
                && !longDnsPermitted) {
...
            if(attrValues->n.attrValue.val.x.size >= SA_MAX_UNEXTENDED_NAME_LENGTH) {
                LOG_NO("ERR_NAME_TOO_LONG: Attribute '%s' has long DN. "
                    "Not allowed by IMM service or extended names are disabled",
                    attrName.c_str());
                err = SA_AIS_ERR_NAME_TOO_LONG;
                goto rtObjectCreateExit;
            }

Related

Tickets: #2270
Wiki: ChangeLog-5.0.2
Wiki: ChangeLog-5.1.1

Discussion

  • Hung Nguyen

    Hung Nguyen - 2017-01-23
    • status: accepted --> review
     
  • Hung Nguyen

    Hung Nguyen - 2017-01-25
    • status: review --> fixed
     

Log in to post a comment.