mirror of
https://github.com/samba-team/samba.git
synced 2025-02-28 01:58:17 +03:00
CVE-2022-2031 s4:kpasswd: Account for missing target principal
This field is supposed to be optional. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15074 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andreas Schneider <asn@samba.org>
This commit is contained in:
parent
2872ccc931
commit
b423c370b9
@ -142,6 +142,7 @@ static krb5_error_code kpasswd_set_password(struct kdc_server *kdc,
|
||||
return KRB5_KPASSWD_HARDERROR;
|
||||
}
|
||||
|
||||
if (target_principal != NULL) {
|
||||
target_realm = smb_krb5_principal_get_realm(
|
||||
mem_ctx, context, target_principal);
|
||||
code = krb5_unparse_name_flags(context,
|
||||
@ -153,6 +154,7 @@ static krb5_error_code kpasswd_set_password(struct kdc_server *kdc,
|
||||
*error_string = "String conversion failed";
|
||||
return KRB5_KPASSWD_HARDERROR;
|
||||
}
|
||||
}
|
||||
|
||||
if ((target_name != NULL && target_realm == NULL) ||
|
||||
(target_name == NULL && target_realm != NULL)) {
|
||||
|
Loading…
x
Reference in New Issue
Block a user