sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
Code

idl: drsuapi_DsaAddressListItem_V1 limit recursion

Browse Source 
Limit number of drsuapi_DsaAddressListItem_V1 elements to 1024

Credit to OSS-Fuzz

REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19820
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14254

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Gary Lockyer 2020-01-30 08:52:34 +13:00 committed by Andrew Bartlett
parent 5d323f2a2e
commit 2f8c3b6226
2 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
librpc/idl/drsuapi.idl
View File

@ -1452,7 +1452,7 @@ interface drsuapi
/* list of network names of the DCs
* to which the referral is directed */
typedef struct {
drsuapi_DsaAddressListItem_V1 *next;
[max_recursion(1024)] drsuapi_DsaAddressListItem_V1 *next;
lsa_String *address;
} drsuapi_DsaAddressListItem_V1;

1
selftest/knownfail.d/bug-14254
View File

@ -1 +0,0 @@
^samba.tests.blackbox.ndrdump.samba.tests.blackbox.ndrdump.NdrDumpTests.test_ndrdump_fuzzed_drsuapi_DsaAddressListItem_V1