From: Pierangelo Masarati <ando@openldap.org>
Date: Sat, 20 Nov 2004 12:07:39 +0000 (+0000)
Subject: cleanup fix to ITS#3303
X-Git-Tag: OPENLDAP_REL_ENG_2_3_0ALPHA~261
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=c75386a279bb6de5de2fe59b9414813899535932;p=openldap

cleanup fix to ITS#3303
---

diff --git a/servers/slapd/acl.c b/servers/slapd/acl.c
index 259e7e8937..575ea121aa 100644
--- a/servers/slapd/acl.c
+++ b/servers/slapd/acl.c
@@ -2492,7 +2492,11 @@ aci_mask(
 		return 0;
 	}
 
-	/* note: this may fail if a DN contains a valid '#' (unescaped) */
+	/* NOTE: this may fail if a DN contains a valid '#' (unescaped);
+	 * just grab all the berval up to its end.
+	 * NOTE: the problem could be solved by providing the DN with
+	 * the embedded '#' encoded as hexpairs: "cn=Foo#Bar" would 
+	 * become "cn=Foo\23Bar" and be safely used by aci_mask(). */
 #if 0
 	if ( aci_get_part( aci, 4, '#', &sdn ) < 0 ) {
 		return 0;