From 44d60762a2ffe45b2dadf05634eefb2af2e3ce14 Mon Sep 17 00:00:00 2001

From: Jakub Hrozek <jhrozek@redhat.com>

Date: Mon, 18 Nov 2013 16:38:34 +0100

Subject: [PATCH 4/6] LDAP: Initialize user count for AD matching rule

https://fedorahosted.org/sssd/ticket/2157

If AD matching rule was selected, but the group was empty, the SSSD

accessed random data. Initializing count to zero prevents that.

---

 src/providers/ldap/sdap_async_groups.c | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/providers/ldap/sdap_async_groups.c b/src/providers/ldap/sdap_async_groups.c

index 7a8f3e2a5c83c5b320497a76c363a90620315dcf..9f7e3e55d0234e9aa7b9e59456044587bcad88ef 100644

--- a/src/providers/ldap/sdap_async_groups.c

+++ b/src/providers/ldap/sdap_async_groups.c

@@ -1828,7 +1828,7 @@ static void sdap_ad_match_rule_members_process(struct tevent_req *subreq)

     struct sysdb_attrs *group = state->groups[0];

     struct ldb_message_element *member_el;

     struct ldb_message_element *orig_dn_el;

-    size_t count;

+    size_t count = 0;

     size_t i;

     hash_table_t *ghosts;

-- 

1.8.4.2