The LDAP provider in JNDI supports the LDAP compare operation indirectly.
A suitably constrained search operation is automatically converted into a
compare operation. The type and value of the search filter become the ava
of the compare operation.

When the value component of the search filter contains binary values
(encoded using the \xx notation of RFC 2254) then these are not correctly
decoded before assembling the ava component of the compare operation.

This problem only occurs when the search filter contains non-string values.