ITS#2219: empty value return filter control bug

diff --git a/servers/slapd/controls.c b/servers/slapd/controls.c
index acd9f6949fc1a67b4f7cdaa5313ed64773f3b007..7b4a124231d32a0a5063eebe685cc41ebf14cdd5 100644 (file)
--- a/servers/slapd/controls.c
+++ b/servers/slapd/controls.c
@@ -567,6 +567,11 @@ int parseValuesReturnFilter (
                return LDAP_PROTOCOL_ERROR;
        }
 
+       if ( ctrl->ldctl_value.bv_len == 0 ) {
+               *text = "valuesreturnfilter control value is empty";
+               return LDAP_PROTOCOL_ERROR;
+       }
+
        ber = ber_init( &(ctrl->ldctl_value) );
        if (ber == NULL) {
                *text = "internal error";