[dovecot/core] 5ad535: lib-ldap: Store error if sending request to LDAP f...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/dovecot/core
  Commit: 5ad53564f6b1e5e4ca8c5df485fc385d3edfaaa9
      https://github.com/dovecot/core/commit/5ad53564f6b1e5e4ca8c5df485fc385d3edfaaa9
  Author: Aki Tuomi <aki.tuomi at dovecot.fi>
  Date:   2017-07-30 (Sun, 30 Jul 2017)

  Changed paths:
    M src/lib-ldap/ldap-connection.c

  Log Message:
  -----------
  lib-ldap: Store error if sending request to LDAP fails

If the request cannot be sent e.g. due to bad search filter
store the error into the result.

Fixes Panic: file ldap-connection.c: line 709 (ldap_result_has_failed): assertion failed: ((result->openldap_ret == LDAP_SUCCESS) == (result->error_string == NULL))


  Commit: b55776caaa59a61bcea0fdffbff3a6808aff4fc9
      https://github.com/dovecot/core/commit/b55776caaa59a61bcea0fdffbff3a6808aff4fc9
  Author: Aki Tuomi <aki.tuomi at dovecot.fi>
  Date:   2017-07-30 (Sun, 30 Jul 2017)

  Changed paths:
    M src/plugins/dict-ldap/dict-ldap.c

  Log Message:
  -----------
  dict-ldap: Escape LDAP search filter properly

This is syntaxical escaping to make ldap servers accept queries
with escapable characters, instead of erroring out. It is possible
that the filter could have been modified in unexpected ways
if the input comes from untrusted sources.


  Commit: 917cac3e0f87f1c60e6569dcb6efba97ac0aa8c2
      https://github.com/dovecot/core/commit/917cac3e0f87f1c60e6569dcb6efba97ac0aa8c2
  Author: Aki Tuomi <aki.tuomi at dovecot.fi>
  Date:   2017-07-30 (Sun, 30 Jul 2017)

  Changed paths:
    M src/auth/db-ldap.c

  Log Message:
  -----------
  auth: Escape LDAP search filter properly

This is syntaxical escaping to make ldap servers accept queries
with escapable characters, instead of erroring out.


Compare: https://github.com/dovecot/core/compare/d577bb9027e4...917cac3e0f87