3 Commits

Author	SHA1	Message	Date
Joseph Sutton	6a10e890a0	CVE-2022-2031 auth: Add ticket type field to auth_user_info_dc and auth_session_info ... This field may be used to convey whether we were provided with a TGT or a non-TGT. We ensure both structures are zeroed out to avoid incorrect results being produced by an uninitialised field. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andreas Schneider <asn@samba.org>	2022-07-27 10:52:36 +00:00
Stefan Metzmacher	b173ac586a	CVE-2021-3738 auth_util: avoid talloc_tos() in copy_session_info() ... We want to use this also in code without existing stackframe. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14468 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2021-11-09 19:45:34 +00:00
Björn Baumbach	96b5bf1370	auth: move copy_session_info() from source3 into the global auth context ... Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Volker Lendecke <vl@samba.org>	2018-10-11 10:28:17 +02:00