Andrew Bartlett 28e2a518ff dns_server: Avoid ldb_dn_add_child_fmt() on untrusted input ...

By using the new ldb_dn_add_child_val() we ensure that the user-controlled values are
not parsed as DN seperators.

Additionally, the casefold DN is obtained before the search to trigger
a full parse of the DN before being handled to the LDB search.

This is not normally required but is done here due to the nature
of the untrusted input.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13466

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>

2018-08-15 07:08:24 +02:00

..

dlz_bind9.c

dns_server: Avoid ldb_dn_add_child_fmt() on untrusted input

2018-08-15 07:08:24 +02:00

dlz_minimal.h

dlz-bind: Add support for BIND 9.12.x

2018-08-10 02:44:36 +02:00

dns_crypto.c

dns: Simplify logic a bit

2018-06-01 11:28:22 +02:00

dns_query.c

dns: Check for talloc_memdup failure

2018-06-01 14:05:56 +02:00

dns_server.c

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

dns_server.h

dns: moving name_equal func into common

2018-07-12 04:31:54 +02:00

dns_update.c

dns: static records

2018-07-12 04:31:56 +02:00

dns_utils.c

dns_server: Remove unused "dns_generate_options"

2018-01-04 00:37:21 +01:00

dnsserver_common.c

dns_server: Avoid ldb_dn_add_child_fmt() on untrusted input

2018-08-15 07:08:24 +02:00

dnsserver_common.h

dns: static records

2018-07-12 04:31:56 +02:00

pydns.c

python: Port dsdb_dns module to Python 3 compatible form.

2018-02-15 00:18:28 +01:00

TODO

dns: Update TODO list

2013-07-29 09:12:17 +02:00

wscript_build

dlz-bind: Add support for BIND 9.12.x

2018-08-10 02:44:36 +02:00