[Freeipa-devel] [PATCH] 971 detect binary LDAP data

Simo Sorce simo at redhat.com
Mon Feb 27 15:47:45 UTC 2012


On Mon, 2012-02-27 at 09:44 -0500, Rob Crittenden wrote:
> We are pretty trusting that the data coming out of LDAP matches its 
> schema but it is possible to stuff non-printable characters into most 
> attributes.
> 
> I've added a sanity checker to keep a value as a python str type 
> (treated as binary internally). This will result in a base64 encoded 
> blob be returned to the client.

Shouldn't you try to parse it as a unicode string and catch TypeError to
know when to return it as binary ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the Freeipa-devel mailing list