sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
Code

tests/dcerpc/raw_protocol: add more tests for auth_pad alignment

Browse Source 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit 0bc562eb26)
This commit is contained in:
Stefan Metzmacher 2020-11-12 17:22:19 +01:00 committed by Jule Anger
parent a6dec953e7
commit 5efc2a0ea9
2 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
python/samba/tests/dcerpc/raw_protocol.py
View File

@ -6720,6 +6720,7 @@ class TestDCERPC_BIND(RawDCERPCTest):
def _test_spnego_level_bind(self, auth_level,
g_auth_level=dcerpc.DCERPC_AUTH_LEVEL_INTEGRITY,
auth_pad_alignment=dcerpc.DCERPC_AUTH_PAD_ALIGNMENT,
alter_fault=None,
request_fault=None,
response_fault_flags=0):
@ -6749,10 +6750,10 @@ class TestDCERPC_BIND(RawDCERPCTest):
self.assertIsNotNone(g)
stub_bin = b'\x00' * 17
mod_len = len(stub_bin) % dcerpc.DCERPC_AUTH_PAD_ALIGNMENT
mod_len = len(stub_bin) % auth_pad_alignment
auth_pad_length = 0
if mod_len > 0:
auth_pad_length = dcerpc.DCERPC_AUTH_PAD_ALIGNMENT - mod_len
auth_pad_length = auth_pad_alignment - mod_len
stub_bin += b'\x00' * auth_pad_length
if g_auth_level >= dcerpc.DCERPC_AUTH_LEVEL_INTEGRITY:
@ -6882,6 +6883,20 @@ class TestDCERPC_BIND(RawDCERPCTest):
request_fault=dcerpc.DCERPC_NCA_S_OP_RNG_ERROR,
response_fault_flags=dcerpc.DCERPC_PFC_FLAG_DID_NOT_EXECUTE)
def test_spnego_integrity_bind_auth_align4(self):
return self._test_spnego_level_bind(auth_level=dcerpc.DCERPC_AUTH_LEVEL_INTEGRITY,
g_auth_level=dcerpc.DCERPC_AUTH_LEVEL_INTEGRITY,
auth_pad_alignment=4,
request_fault=dcerpc.DCERPC_NCA_S_OP_RNG_ERROR,
response_fault_flags=dcerpc.DCERPC_PFC_FLAG_DID_NOT_EXECUTE)
def test_spnego_integrity_bind_auth_align2(self):
return self._test_spnego_level_bind(auth_level=dcerpc.DCERPC_AUTH_LEVEL_INTEGRITY,
g_auth_level=dcerpc.DCERPC_AUTH_LEVEL_INTEGRITY,
auth_pad_alignment=2,
request_fault=dcerpc.DCERPC_NCA_S_PROTO_ERROR,
response_fault_flags=0)
def test_spnego_privacy_bind_none(self):
# This fails...
return self._test_spnego_level_bind(auth_level=dcerpc.DCERPC_AUTH_LEVEL_PRIVACY,

1
selftest/knownfail.d/dcerpc-auth-pad
View File

@ -17,3 +17,4 @@
^samba.tests.dcerpc.raw_protocol.samba.tests.dcerpc.raw_protocol.TestDCERPC_BIND.test_auth_tail_pad_ntlm_auth3
^samba.tests.dcerpc.raw_protocol.samba.tests.dcerpc.raw_protocol.TestDCERPC_BIND.test_auth_tail_pad_spnego_alter
^samba.tests.dcerpc.raw_protocol.samba.tests.dcerpc.raw_protocol.TestDCERPC_BIND.test_auth_tail_pad_spnego_auth3
^samba.tests.dcerpc.raw_protocol.samba.tests.dcerpc.raw_protocol.TestDCERPC_BIND.test_spnego_integrity_bind_auth_align2