allow empty suffix

diff --git a/servers/slapd/dn.c b/servers/slapd/dn.c
index b9705ba95095346a048fd3640074fefb7b50c5a4..3a7a2e8e3f14edad665dd57c4533dd75048e847c 100644 (file)
--- a/servers/slapd/dn.c
+++ b/servers/slapd/dn.c
@@ -458,6 +458,14 @@ dn_issuffixbv(
 {
        int     d = dn->bv_len - suffix->bv_len;
 
+       assert( dn );
+       assert( suffix );
+
+       /* empty suffix matches any dn */
+       if ( suffix->bv_len == 0 ) {
+               return 1;
+       }
+
        /* suffix longer than dn */
        if ( d < 0 ) {
                return 0;
@@ -491,6 +499,9 @@ dn_issuffix(
 {
        struct berval   bvdn, bvsuffix;
 
+       assert( dn );
+       assert( suffix );
+
        bvdn.bv_val = (char *) dn;
        bvdn.bv_len = strlen( dn );
        bvsuffix.bv_val = (char *) suffix;