3 Commits

Author	SHA1	Message	Date
Douglas Bagnall	cc3a67760c	CVE-2020-10745: ndr/dns-utils: prepare for NBT compatibility ... NBT has a funny thing where it sometimes needs to send a trailing dot as part of the last component, because the string representation is a user name. In DNS, "example.com", and "example.com." are the same, both having three components ("example", "com", ""); in NBT, we want to treat them differently, with the second form having the three components ("example", "com.", ""). This retains the logic of e6e2ec0001. Also DNS compression cannot be turned off for NBT. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14378 Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>	2020-07-02 09:01:41 +00:00
Douglas Bagnall	51a4571849	CVE-2020-10745: ndr_dns: do not allow consecutive dots ... The empty subdomain component is reserved for the root domain, which we should only (and always) see at the end of the list. That is, we expect "example.com.", but never "example..com". BUG: https://bugzilla.samba.org/show_bug.cgi?id=14378 Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>	2020-07-02 09:01:41 +00:00
Douglas Bagnall	f4b2fd00fe	CVE-2020-10745: pytests: hand-rolled invalid dns/nbt packet tests ... The client libraries don't allow us to make packets that are broken in certain ways, so we need to construct them as byte strings. These tests all fail at present, proving the server is rendered unresponsive, which is the crux of CVE-2020-10745. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14378 Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>	2020-07-02 09:01:41 +00:00