X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=servers%2Fslapd%2Facl.c;h=76e54530c6ad935ab5b476facf5778b05f7b7f9f;hb=6147119dc8526a758a7c576940fe8483e2b93915;hp=e632c1a9f69260e50cf22b01ece5645369850ccc;hpb=5600097ae108cfbf72baba962ca2e0fb6dd228f6;p=openldap

diff --git a/servers/slapd/acl.c b/servers/slapd/acl.c
index e632c1a9f6..76e54530c6 100644
--- a/servers/slapd/acl.c
+++ b/servers/slapd/acl.c
@@ -1,4 +1,8 @@
 /* acl.c - routines to parse and check acl's */
+/*
+ * Copyright 1998-1999 The OpenLDAP Foundation, All Rights Reserved.
+ * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
+ */
 
 #include "portable.h"
 
@@ -360,7 +364,10 @@ acl_access_allowed(
 			 */
 			/* see if asker is listed in dnattr */
 			string_expand(buf, sizeof(buf), b->a_group_pat, edn, matches);
-			(void) dn_normalize_case(buf);
+			if ( dn_normalize_case(buf) == NULL ) {
+				/* did not expand to a valid dn */
+				continue;
+			}
 
 			if (backend_group(be, e, buf, op->o_ndn,
 				b->a_group_oc, b->a_group_at) != 0)