fox to ITS#5070 fix: error out if serialNumber requires size > sizeof(long long)...

diff --git a/servers/slapd/schema_init.c b/servers/slapd/schema_init.c
index ec9547b3a78646b37896dfd6cc30885080c53f80..779b9420b502c2d489dacf03c8b8c384e76649f4 100644 (file)
--- a/servers/slapd/schema_init.c
+++ b/servers/slapd/schema_init.c
@@ -3414,8 +3414,17 @@ certificateExactNormalize(
                        }
 
                        seriallen = snprintf( serialbuf, sizeof(serialbuf), "%llu", sn );
+
+               } else {
+                       /* do not accept serialNumber that requires
+                        * more than long long */
+                       rc = LDAP_INVALID_SYNTAX;
+                       goto done;
                }
+
 #else
+               /* do not accept serialNumber that requires
+                * more than long */
                rc = LDAP_INVALID_SYNTAX;
                goto done;
 #endif