August 19, 2004

DirectoryServices has a buffer overflow bug

Or something of the sort.

Or, more precisely, don’t create a group with 5000+ users in it and expect the LDAPv3 plugin on DirectoryServices to stay running. I had created this large group to be the “Domain Users” mapped group in Samba 3 and added all users to it. Unfortunately, when DirectoryServices on MacOS X looks up the groups of which a user is a member, it gets back the complete list of memberUid attributes for the resulting groups. Something that large apparently causes it to crash.

Posted by Rowan Littell at August 19, 2004 03:10 PM