parse_ldif: keep the full length when joining folded lines

When a folded LDIF line was appended to the saved portion, len was left as the length of the continuation alone. A second continuation was then saved with that short length and copied over the middle of the attribute, so a value folded over three or more lines was corrupted, e.g. "sudoCommand: /usr/bin/sys", " temctl rest", " art httpd" became "sudoCommandart httpd" and was rejected as an invalid LDIF attribute.

Add the saved length to len after the append, and add a cvtsudoers regression test.

Author: Ar-maan05

MANIFEST

@@ -866,6 +866,8 @@ plugins/sudoers/regress/cvtsudoers/test40.out.ok
 plugins/sudoers/regress/cvtsudoers/test40.sh
 plugins/sudoers/regress/cvtsudoers/test41.out.ok
 plugins/sudoers/regress/cvtsudoers/test41.sh
+plugins/sudoers/regress/cvtsudoers/test42.out.ok
+plugins/sudoers/regress/cvtsudoers/test42.sh
 plugins/sudoers/regress/cvtsudoers/test5.out.ok
 plugins/sudoers/regress/cvtsudoers/test5.sh
 plugins/sudoers/regress/cvtsudoers/test6.out.ok

plugins/sudoers/parse_ldif.c

@@ -654,6 +654,7 @@ sudoers_parse_ldif(struct sudoers_parse_tree *parse_tree,
 	    memcpy(tmp + savedlen, line, (size_t)len + 1);
 	    free(line);
 	    line = tmp;
+	    len += (ssize_t)savedlen;
 	    savedline = NULL;
 	}
 

plugins/sudoers/regress/cvtsudoers/test42.out.ok

@@ -0,0 +1,2 @@
+# sudoRole millert
+millert ALL = /usr/bin/systemctl restart httpd, /usr/bin/ls

plugins/sudoers/regress/cvtsudoers/test42.sh

@@ -0,0 +1,20 @@
+#!/bin/sh
+#
+# Test an LDIF attribute folded over more than two lines.
+#
+
+: ${CVTSUDOERS=cvtsudoers}
+
+$CVTSUDOERS -c "" -i ldif -b "ou=SUDOers,dc=sudo,dc=ws" -f sudoers <<EOF
+dn: cn=millert,ou=SUDOers,dc=sudo,dc=ws
+objectClass: top
+objectClass: sudoRole
+cn: millert
+sudoUser: millert
+sudoHost: ALL
+sudoCommand: /usr/bin/sys
+ temctl rest
+ art httpd
+sudoCommand: /usr/bin/ls
+
+EOF