1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-06 13:18:07 +03:00
samba-mirror/source3/rpc_server/mdssvc
Ralph Boehme 1809843614 CVE-2023-34968: mdssvc: return a fake share path
Instead of returning the real server-side absolute path of shares and search
results, return a fake absolute path replacing the path of the share with the
share name, iow for a share "test" with a server-side path of "/foo/bar", we
previously returned

  /foo/bar and
  /foo/bar/search/result

and now return

  /test and
  /test/search/result

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15388

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2023-07-14 15:16:30 +02:00
..
dalloc.c CVE-2023-34967: mdssvc: add type checking to dalloc_value_for_key() 2023-07-14 15:16:26 +02:00
dalloc.h s3:mdssvc: mds_dalloc_dump() -> dalloc_dump() 2019-08-08 20:24:31 +00:00
elasticsearch_mappings.json s3:mdssvc: add Elasticsearch backend 2019-10-09 14:35:29 +00:00
es_lexer.l s3:mdssvc: add Elasticsearch backend 2019-10-09 14:35:29 +00:00
es_mapping.c mdssvc: prepare for ignore attribute and type mapping errors 2021-10-14 09:33:38 +00:00
es_mapping.h s3:mdssvc: add Elasticsearch backend 2019-10-09 14:35:29 +00:00
es_parser_test.c s3:mdssvc: make use of lp_parm_const_string() 2019-11-27 10:25:31 +00:00
es_parser.y mdssvc: add options to allow ignoring attribute and type mapping errors 2021-10-14 09:33:38 +00:00
marshalling.c CVE-2023-34968: mdssvc: introduce an allocating wrapper to sl_pack() 2023-07-14 15:16:30 +02:00
marshalling.h CVE-2023-34968: mdssvc: introduce an allocating wrapper to sl_pack() 2023-07-14 15:16:30 +02:00
mdssvc_es.c s3:mdssvc: make use of lp_parm_const_string() 2019-11-27 10:25:31 +00:00
mdssvc_es.h s3:mdssvc: add Elasticsearch backend 2019-10-09 14:35:29 +00:00
mdssvc_noindex.c s3:mdssvc: add noindex backend 2019-08-08 20:24:32 +00:00
mdssvc_noindex.h s3:mdssvc: add noindex backend 2019-08-08 20:24:32 +00:00
mdssvc_tracker.c s3-mdssvc: factor out Tracker backend logic 2019-08-08 20:24:31 +00:00
mdssvc_tracker.h s3-mdssvc: factor out Tracker backend logic 2019-08-08 20:24:31 +00:00
mdssvc.c CVE-2023-34968: mdssvc: return a fake share path 2023-07-14 15:16:30 +02:00
mdssvc.h CVE-2023-34968: mdssvc: return a fake share path 2023-07-14 15:16:30 +02:00
README s3-mdssvc: lexer and parser for Spotlight queries 2015-07-07 17:34:28 +02:00
sparql_lexer.l s3:mdssvc: fix flex compilation error 2019-05-28 11:49:06 +00:00
sparql_mapping.c s3/rpc_server/mdssvc: add attribute "kMDItemContentType" 2017-02-15 06:20:52 +01:00
sparql_mapping.h s3-mdssvc: Spotlight attribute mappings 2015-07-07 17:34:28 +02:00
sparql_parser_test.c s3-mdssvc: factor out Tracker backend logic 2019-08-08 20:24:31 +00:00
sparql_parser.y s3-mdssvc: factor out Tracker backend logic 2019-08-08 20:24:31 +00:00
srv_mdssvc_nt.c CVE-2023-34968: mdssvc: return a fake share path 2023-07-14 15:16:30 +02:00
srv_mdssvc_nt.h s3-mdssvc: main Spotlight code 2015-07-07 17:34:28 +02:00
test_mdsparser_es.c selftest: add a test ignored spotlight/elasticsearch mapping failures 2021-10-14 09:33:38 +00:00

Introduction:
=============
This directory contains source code for the metadata search service
aka Spotlight.

Bison and flex:
===============
Not yet integrated into the waf buildsystem, run these by hand:

$ bison -d -o sparql_parser.c sparql_parser.y
$ flex -o sparql_lexer.c sparql_lexer.l

or use the bundled Makefile.