From 5f38be985bc98969b0fdaa6ece8f84b11bdddc2f Mon Sep 17 00:00:00 2001

From: Ludwig Krispenz <lkrispen@redhat.com>

Date: Thu, 9 Nov 2017 10:20:44 +0100

Subject: [PATCH] Ticket 49443 - scope one searches in 1.3.7 give incorrect

 results

Bug: if a onelevel search is done for an unidexed attribute, the filter test is skipped

     and all children of the search base are returned

Fix: enforce filter test if allids

Reviewed by: Mark, thanks

---

 ldap/servers/slapd/back-ldbm/idl_set.c | 5 +++++

 1 file changed, 5 insertions(+)

diff --git a/ldap/servers/slapd/back-ldbm/idl_set.c b/ldap/servers/slapd/back-ldbm/idl_set.c

index ba39ff03f..b68e7ab76 100644

--- a/ldap/servers/slapd/back-ldbm/idl_set.c

+++ b/ldap/servers/slapd/back-ldbm/idl_set.c

@@ -349,6 +349,11 @@ idl_set_intersect(IDListSet *idl_set, backend *be)

 {

     IDList *result_list = NULL;

+    if (idl_set->allids) {

+        /* if any component was allids we have to apply the filtertest */

+        slapi_be_set_flag(be, SLAPI_BE_FLAG_DONT_BYPASS_FILTERTEST);

+    }

+

     if (idl_set->allids != 0 && idl_set->count == 0) {

         /*

          * We only have allids, so must be allids.

-- 

2.13.6