Skip to content

[pull] master from haproxy:master#213

Merged
pull[bot] merged 2 commits intoMu-L:masterfrom
haproxy:master
Sep 16, 2021
Merged

[pull] master from haproxy:master#213
pull[bot] merged 2 commits intoMu-L:masterfrom
haproxy:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Sep 16, 2021

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

capflam and others added 2 commits September 16, 2021 17:24
When the LDAP response is parsed, the message length is not properly
decoded. While it works for LDAP servers encoding it on 1 byte, it does not
work for those using a multi-bytes encoding. Among others, Active Directory
servers seems to encode messages or elements length on 4 bytes.

In this patch, we only handle length of BindResponse messages encoded on 1,
2 or 4 bytes. In theory, it may be encoded on any bytes number less than 127
bytes. But it is useless to make this part too complex. It should be ok this
way.

This patch should fix the issue #1390. It should be backported to all stable
versions. While it should be easy to backport it as far as 2.2, the patch
will have to be totally rewritten for lower versions.
A lot of people encounter problems when trying to inject a certificate
file which contains extra informations or empty lines.

This patch adds a paragraph and a sanitizing example.

Must be backported as far as 2.1.
@pull pull bot added the ⤵️ pull label Sep 16, 2021
@pull pull bot merged commit ed8bfad into Mu-L:master Sep 16, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants