Douglas Bagnall 1fe8c790b2 CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds ...

For a string that had N spaces at the beginning, we would
try to move N bytes beyond the end of the string.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14655

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2021-03-24 12:05:32 +00:00

..

ABI

ldb: change the version to 2.2.0 for Samba 4.13

2020-02-26 23:11:39 +00:00

common

CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds

2021-03-24 12:05:32 +00:00

docs

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

examples

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

include

ldb.h: remove undefined async_ctx function signatures

2021-03-17 05:57:34 +00:00

ldb_key_value

ldb_kv_index: fix empty initializer compile warning

2020-11-10 06:53:43 +00:00

ldb_ldap

ldb_ldap: Fix a memleak

2020-07-02 10:38:34 +00:00

ldb_ldb

ldb: Add MDB support to ldb://

2018-05-23 02:27:12 +02:00

ldb_map

lib:ldb: Add missing break in switch statement

2021-02-01 21:50:32 +00:00

ldb_mdb

Fix clang 9 parentheses-equality warnings

2020-05-08 09:31:31 +00:00

ldb_sqlite3

CVE-2018-1140 ldb: Check for ldb_dn_get_casefold() failure in ldb_sqlite

2018-08-14 13:57:15 +02:00

ldb_tdb

lib ldb key value backends: Add nested txn support

2019-06-21 04:27:12 +00:00

man

Spelling fixes s/overrided/overridden/

2019-04-02 01:12:11 +00:00

modules

ldb/mod/paged_searches: cope with NULL control data

2020-06-13 05:25:31 +00:00

nssldb

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

tests

CVE-2021-20277 ldb tests: ldb_match tests with extra spaces

2021-03-24 12:05:32 +00:00

tools

ldb: Avoid a cast (unsigned long long) in ldbmodify.c

2020-06-15 17:59:39 +00:00

web

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

_ldb_text.py

ldb/tests/_ldb_text: remove unused imports

2018-10-25 21:45:55 +02:00

configure

build: Move python detection back into waf (instead of in configure and Makefile)

2018-12-14 14:40:19 +01:00

Doxyfile

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

examples.dox

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

ldb.pc.in

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

mainpage.dox

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

Makefile

Search for location of waf script

2019-02-26 10:39:24 +01:00

pyldb_util.c

pyldb: rename pyldb_Dn_AsDn() to pyldb_Dn_AS_DN()

2019-07-10 04:32:13 +00:00

pyldb-util.pc.in

lib/ldb: Enable use of a python3 pyldb-util system library

2017-03-10 07:31:10 +01:00

pyldb.c

pyldb: catch potential overflow error in py_timestring

2021-03-01 03:50:35 +00:00

pyldb.h

pyldb: rename pyldb_Dn_AsDn() to pyldb_Dn_AS_DN()

2019-07-10 04:32:13 +00:00

README_gcov.txt

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

wscript

lib/ldb: add unit test for ldb_ldap internal code

2020-06-19 07:16:37 +00:00