Andrew Bartlett 28e2a518ff dns_server: Avoid ldb_dn_add_child_fmt() on untrusted input ... By using the new ldb_dn_add_child_val() we ensure that the user-controlled values are not parsed as DN seperators. Additionally, the casefold DN is obtained before the search to trigger a full parse of the DN before being handled to the LDB search. This is not normally required but is done here due to the nature of the untrusted input. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13466 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>		2018-08-15 07:08:24 +02:00
..
dlz_bind9.c	dns_server: Avoid ldb_dn_add_child_fmt() on untrusted input	2018-08-15 07:08:24 +02:00
dlz_minimal.h	dlz-bind: Add support for BIND 9.12.x	2018-08-10 02:44:36 +02:00
dns_crypto.c	dns: Simplify logic a bit	2018-06-01 11:28:22 +02:00
dns_query.c	dns: Check for talloc_memdup failure	2018-06-01 14:05:56 +02:00
dns_server.c	samdb: Add remote address to connect	2018-05-10 20:02:23 +02:00
dns_server.h	dns: moving name_equal func into common	2018-07-12 04:31:54 +02:00
dns_update.c	dns: static records	2018-07-12 04:31:56 +02:00
dns_utils.c	dns_server: Remove unused "dns_generate_options"	2018-01-04 00:37:21 +01:00
dnsserver_common.c	dns_server: Avoid ldb_dn_add_child_fmt() on untrusted input	2018-08-15 07:08:24 +02:00
dnsserver_common.h	dns: static records	2018-07-12 04:31:56 +02:00
pydns.c	python: Port dsdb_dns module to Python 3 compatible form.	2018-02-15 00:18:28 +01:00
TODO	dns: Update TODO list	2013-07-29 09:12:17 +02:00
wscript_build	dlz-bind: Add support for BIND 9.12.x	2018-08-10 02:44:36 +02:00