2 Commits

Author	SHA1	Message	Date
Gary Lockyer	a699256f43	lib ldb: Limit depth of ldb_parse_tree ... Limit the number of nested conditionals allowed by ldb_parse tree to 128, to avoid potential stack overflow issues. Credit Oss-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19508 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Gary Lockyer <gary@samba.org> Autobuild-Date(master): Sun May 10 23:21:08 UTC 2020 on sn-devel-184	2020-05-10 23:21:08 +00:00
Michael Hanselmann	7f48fbcf7b	ldb: Avoid read beyond buffer ... Calling the "ldb_parse_tree" function with a filter consisting of exactly a single space (" ") would trigger a read beyond the input buffer. A unittest is included. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13900 Signed-off-by: Michael Hanselmann <public@hansmi.ch> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Tim Beale <timbeale@catalyst.net.nz>	2019-05-30 07:12:11 +00:00