ldb: use strncmp instead of strcmp when comparing the val part

val part of a DN's component is DATA_BLOB and nothing insure that it
will be finished by a '\0'

Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/lib/ldb/common/ldb_dn.c b/lib/ldb/common/ldb_dn.c
index b910489a8e8f1bcf4b9bef9cf57530381f8003d8..14596f6c3711f5a643f1b485e40cfec0076fedab 100644 (file)
--- a/lib/ldb/common/ldb_dn.c
+++ b/lib/ldb/common/ldb_dn.c
@@ -1097,7 +1097,7 @@ int ldb_dn_compare_base(struct ldb_dn *base, struct ldb_dn *dn)
                if (b_vlen != dn_vlen) {
                        return b_vlen - dn_vlen;
                }
-               ret = strcmp(b_vdata, dn_vdata);
+               ret = strncmp(b_vdata, dn_vdata, b_vlen);
                if (ret != 0) return ret;
 
                n_base--;
@@ -1176,7 +1176,7 @@ int ldb_dn_compare(struct ldb_dn *dn0, struct ldb_dn *dn1)
                if (dn0_vlen != dn1_vlen) {
                        return dn0_vlen - dn1_vlen;
                }
-               ret = strcmp(dn0_vdata, dn1_vdata);
+               ret = strncmp(dn0_vdata, dn1_vdata, dn0_vlen);
                if (ret != 0) {
                        return ret;
                }