5 Commits

Author	SHA1	Message	Date
Douglas Bagnall	5c81f34935	lib/fuzzing: LLVMFuzzerTestOneInput() takes const uint8_t* ... We have been using `uint8_t *`, which works fine as far as linking goes, but leads fuzz target developers to sometimes forget why they can't just modify the passed in string instead of copying it for modification (e.g. to NUL-terminate). REF: https://llvm.org/docs/LibFuzzer.html#fuzz-target Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2023-08-08 04:39:38 +00:00
Gary Lockyer	3149ea0a8a	CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decode ... Add search request size limits to ldap_decode calls. The ldap server uses the smb.conf variable "ldap max search request size" which defaults to 250Kb. For cldap the limit is hard coded as 4096. Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2020-05-04 02:59:32 +00:00
Gary Lockyer	f467727db5	CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth ... Add maximum parse tree depth to the call to asn1_init, which will be used to limit the depth of the ASN.1 parse tree. Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2020-05-04 02:59:31 +00:00
Douglas Bagnall	1d35962128	fuzz_ldap_decode: do not print to stdout ... The fuzzer doesn't care and it slows things down Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2020-01-12 19:50:37 +00:00
Michael Hanselmann	de7c78335d	Add fuzzing binary for ldap_decode ... Signed-off-by: Michael Hanselmann <public@hansmi.ch> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org>	2019-10-18 07:31:45 +00:00