1
0
mirror of https://github.com/samba-team/samba.git synced 2025-07-27 07:42:04 +03:00
Commit Graph

52 Commits

Author SHA1 Message Date
0dc6181894 CVE-2013-4408:s3:Ensure LookupNames replies arrays are range checked.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10185

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Jeremy Allison <jra@samba.org>
2013-12-09 07:05:46 +01:00
77f7f2a976 s3-libnetapi: pass down ndr_interface_table to libnetapi_open_pipe().
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-08-05 10:29:59 +02:00
33d1d52508 s3-netapi: Fix zeroing policy handles in NetLocalGroupAdd_r().
Found by Coverity.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
2012-12-12 09:42:32 +01:00
5e26e94092 s3-talloc Change TALLOC_ZERO_ARRAY() to talloc_zero_array()
Using the standard macro makes it easier to move code into common, as
TALLOC_ZERO_ARRAY isn't standard talloc.
2011-06-09 12:40:08 +02:00
ad0a07c531 s3-talloc Change TALLOC_ZERO_P() to talloc_zero()
Using the standard macro makes it easier to move code into common, as
TALLOC_ZERO_P isn't standard talloc.
2011-06-09 12:40:08 +02:00
ee0b0dd3a1 s3-netapi: Fix Coverity CID #2302: FORWARD_NULL
Guenther
2011-04-27 16:51:02 +02:00
9824e2e5ee s3-rpc_client: add and use rpc_client/rpc_client.h.
Guenther
2011-04-13 22:23:59 +02:00
e32b50894b s3-libnetapi: prefer dcerpc_lsa_X functions.
Guenther
2011-02-02 19:02:09 +01:00
b76657f8d9 s3-libnetapi: prefer dcerpc_samr_X functions in lib/netapi/localgroup.c.
Guenther
2011-02-01 12:49:52 +01:00
f768b32e37 libcli/security Provide a common, top level libcli/security/security.h
This will reduce the noise from merges of the rest of the
libcli/security code, without this commit changing what code
is actually used.

This includes (along with other security headers) dom_sid.h and
security_token.h

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
2010-10-12 05:54:10 +00:00
13756d0e80 s3: Attempt to fix bug 7665
Quite a few of our internal routines put stuff on talloc_tos() these days.
In top-level netapi routines, properly allocate a stackframe and clean it
again. Also, don't leak memory in the rpccli_ callers onto the libnetapi
context.
2010-10-02 12:02:02 +02:00
4dbd743e46 s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions.
Guenther
2010-09-20 14:04:37 -07:00
4bf783d4d6 s3-auth Change type of num_sids to uint32_t
size_t is overkill here, and in struct security_token in the num_sids
is uint32_t.

This includes a change to the prototype of add_sid_to_array()
and add_sid_to_array_unique(), which has had a number of
consequnetial changes as I try to sort out all the callers using
a pointer to the number of sids.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11 18:46:05 +10:00
e978a3d3f4 s3-lsa: separate out init_lsa headers.
Guenther
2010-08-25 22:50:39 +02:00
b6a2cea74d s3-security: use shared "Standard access rights.".
Guenther
2010-06-03 11:00:26 +02:00
230b880d14 s3-rpc_client: move protos to cli_lsarpc.h
Guenther
2010-05-18 21:42:41 +02:00
3d679a3b5f s3-rpc: Avoid including every pipe's client and server stubs everywhere in samba.
Guenther
2009-11-26 20:03:17 +01:00
6a650d7d16 Revert "s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table"
This reverts commit 5fc9d93408.
2009-11-08 19:43:46 +01:00
5fc9d93408 s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table 2009-11-08 13:12:16 +01:00
d9804ae3cc Fix bug #6089 - Winbind samr_OpenDomain not possible with Samba 3.2.6+
What a difference a name makes... :-). Just because something is missnamed
SAMR_ACCESS_OPEN_DOMAIN, when it should actually be SAMR_ACCESS_LOOKUP_DOMAIN,
don't automatically use it for a security check in _samr_OpenDomain().
Jeremy.
2009-04-15 15:40:00 -07:00
a9542ddcb7 libnetapi_open_pipe does not need to return cli_state
The user session key is also available in rpccli->auth->user_session_key

Guenther, please check!

Thanks,

Volker
2009-01-18 20:10:06 +01:00
65dc1eeceb s3: fix various samr callers.
Guenther
2008-10-15 17:11:27 +02:00
fcd10d26a4 netapi: make libnetapi_open_ipc_connection static.
Guenther
(cherry picked from commit 0259914f8f)
(This used to be commit 7edc671cc1)
2008-08-14 12:22:11 +02:00
87b9c9ade2 netapi: make non-implemented local calls default to remote "localhost" calls.
Guenther
(cherry picked from commit aa70e58880)
(This used to be commit 9927ac6eec)
2008-08-14 12:22:02 +02:00
11db643962 netapi: let libnetapi_samr_lookup_and_open_alias return NTSTATUS.
Guenther
(cherry picked from commit dcf6d879a1)
(This used to be commit 8ac6a2739b)
2008-08-14 12:21:44 +02:00
f947d416ff netapi: implement NetLocalGroupSetMembers_r().
Guenther
(This used to be commit bb52ba58e4)
2008-08-11 19:48:02 +02:00
b65fcbc1f5 netapi: implement NetLocalGroupDelMembers_r().
Guenther
(This used to be commit bd31d8f9ec)
2008-08-11 19:47:53 +02:00
14364acd08 netapi: implement NetLocalGroupAddMembers_r().
Guenther
(This used to be commit 53dc9a1181)
2008-08-11 19:47:44 +02:00
2fde42b694 netapi: add skeleton for NetLocalGroup*Member calls.
Guenther
(This used to be commit 563fb06107)
2008-08-11 19:47:24 +02:00
4b74ae0f15 netapi: in NetLocalGroupAdd_r() only set description if necessary.
Guenther
(This used to be commit 7e9fa2c539)
2008-07-31 15:15:39 +02:00
44465215ff netapi: use "buffer" in libnetapi.
Guenther
(This used to be commit 80957bc1bc)
2008-07-30 16:43:47 +02:00
39c344a27f netapi: fix NetLocalGroupAdd.
Guenther
(This used to be commit d4594a7a03)
2008-07-30 16:34:49 +02:00
798b56edae Refactoring: libnetapi_open_pipe takes an interface instead of pipe_idx
(This used to be commit 726e56c72f)
2008-07-21 14:36:27 +02:00
c703304f55 netapi: add caching of samr policy handles.
Guenther
(This used to be commit bf8453da9a)
2008-07-18 17:29:28 +02:00
6565087b73 netapi: let libnetapi_samr_lookup_and_open_alias compose lsa string.
Guenther
(This used to be commit f930900377)
2008-07-18 17:26:55 +02:00
3d140562fa netapi: implement NetLocalGroupEnum_r.
Guenther
(This used to be commit 2cd91e7d4d)
2008-07-18 17:26:55 +02:00
d86068977c netapi: add skeleton for NetLocalGroupEnum().
Guenther
(This used to be commit 71bd0109d6)
2008-07-18 17:25:07 +02:00
63c93682ac netapi: make map_alias_info_to_buffer suitable for arrays in the buffer.
Guenther
(This used to be commit dc0f737bd5)
2008-07-18 17:23:20 +02:00
3e5dabc968 netapi: add libnetapi_samr_open_alias_queryinfo.
Guenther
(This used to be commit 401d6ce210)
2008-07-18 17:23:12 +02:00
34413e4707 netapi: fix some build warnings.
Guenther
(This used to be commit 45cd78030f)
2008-06-03 01:37:55 +02:00
dbb8e163af netapi: use libnetapi_samr_lookup_and_open_alias().
Guenther
(This used to be commit d8fad6bf44)
2008-06-03 01:27:50 +02:00
4fd700ca07 netapi: add libnetapi_samr_lookup_and_open_alias().
Guenther
(This used to be commit 890d63f31c)
2008-06-03 01:27:50 +02:00
bd9d129e6a netapi: use libnetapi_samr_open_builtin_domain().
Guenther
(This used to be commit d1bf8c5ae6)
2008-06-03 01:27:50 +02:00
b652e5b475 netapi: let libnetapi_samr_open_domain return WERROR.
Guenther
(This used to be commit 3d037a07e0)
2008-06-03 01:27:49 +02:00
1ecf67a18c netapi: Implement NetLocalGroupSetInfo().
Guenther
(This used to be commit f991b4d58e)
2008-06-03 01:27:49 +02:00
bf225fc8e0 netapi: add NetLocalGroupSetInfo() skeleton.
Guenther
(This used to be commit 325f419636)
2008-06-03 01:27:49 +02:00
a3f1e2ee0a netapi: implement NetLocalGroupGetInfo().
Guenther
(This used to be commit d735ee79fa)
2008-06-03 01:27:48 +02:00
45baadb31a netapi: add NetLocalGroupGetInfo() skeleton.
Guenther
(This used to be commit f70e37a7fe)
2008-06-03 01:27:48 +02:00
4d6e66a42e netapi: Implement NetLocalGroupDel().
Guenther
(This used to be commit d2426f53fa)
2008-06-03 01:27:47 +02:00
7773d79afd netapi: add NetLocalGroupDel() skeleton.
Guenther
(This used to be commit 4234c87c6c)
2008-06-03 01:27:47 +02:00