Gary Lockyer 2aa1d7a8e4 CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth ...

Add maximum parse tree depth to the call to asn1_init, which will be
used to limit the depth of the ASN.1 parse tree.

Credit to OSS-Fuzz

REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2020-04-21 10:21:09 +02:00

..

auth

auth: Fix CID 1458418 Null pointer dereferences (REVERSE_INULL)

2020-02-19 13:01:32 +00:00

build

source3/build/charset.py: update to handle waf 2.0.4

2018-09-05 06:37:23 +02:00

client

s3: smbclient: Stop an SMB2-connection from blundering into SMB1-specific calls.

2019-10-16 12:15:53 +00:00

exports

…

groupdb

groupdb: Use dom_sid_str_buf

2018-12-20 23:40:24 +01:00

include

s3:libsmb: Add a setup_stat_from_stat_ex() function

2020-01-14 08:30:24 +00:00

intl

lib: Pass mem_ctx to lock_path()

2018-08-17 11:30:10 +02:00

lib

CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth

2020-04-21 10:21:09 +02:00

libads

s3:libads: Do not turn on canonicalization flag for MIT Kerberos

2019-10-16 16:43:59 +00:00

libgpo/gpext

libgpo: Fix CID 1438462 Error handling issues (CHECKED_RETURN)

2018-08-22 00:58:41 +02:00

libnet

libnet_join: add SPNs for additional-dns-hostnames entries

2019-11-05 14:31:48 +00:00

librpc

librpc: Add kerberos tracing

2018-12-19 21:49:29 +01:00

libsmb

CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth

2020-04-21 10:21:09 +02:00

locale

pam_winbind: initial Turkish translation

2017-11-15 13:52:05 +01:00

locking

leases: Streamline leases_db_key a bit

2018-10-03 04:11:59 +02:00

modules

s3: VFS: full_audit. Use system session_info if called from a temporary share definition.

2020-02-20 15:31:20 +00:00

nmbd

nmbd: Use strlcpy instead of StrnCpy

2019-01-08 03:40:26 +01:00

param

s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary

2019-06-13 08:52:28 +00:00

passdb

lookup_name: allow own domain lookup when flags == 0

2019-08-16 09:48:19 +00:00

printing

s3:printing: Fix %J substition

2019-11-18 09:18:14 +00:00

profile

lib: Pass mem_ctx to cache_path()

2018-08-17 14:28:51 +02:00

registry

registry: add a missing include

2019-06-13 08:52:31 +00:00

rpc_client

s3 rpc_client: Fix Asan stack use after scope

2019-05-16 10:37:55 +00:00

rpc_server

s3: rename talloc_sub_advanced() to talloc_sub_full()

2019-11-18 09:18:14 +00:00

rpcclient

rpcclient: Use dom_sid_str_buf

2018-12-11 00:40:31 +01:00

script

selftest: s3: add a test for spnego downgrade from krb5 to ntlm

2019-10-16 12:15:54 +00:00

selftest

s3:selftest: test authentication with an empty userdomain and upn names

2020-02-11 07:51:23 +00:00

services

srcctl3: Improve debug messages

2018-01-16 02:43:03 +01:00

smbd

s3: smbd: Only set xconn->smb1.negprot.done = true after supported_protocols[protocol].proto_reply_fn() succeeds.

2019-12-16 08:22:36 +00:00

torture

s3: torture: Ensure SMB1 cli_qpathinfo2() doesn't return an inode number.

2019-11-04 07:36:17 +00:00

utils

s3: utils: smbtree. Ensure we don't call cli_RNetShareEnum() on an SMB1 connection.

2019-11-18 12:55:39 +00:00

web

…

winbindd

winbindd: handling missing idmap in getgrgid()

2020-02-11 12:26:52 +00:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

wscript: Remove checks for shm_open and shmget

2019-11-04 07:36:17 +00:00

wscript_build

s3:client: Link smbspool_krb5_wrapper against krb5samba

2019-06-26 07:30:27 +00:00

wscript_configure_system_ncurses

source3/wscript_configure_system_ncurses: update to handle waf 2.0.4

2018-09-05 06:37:24 +02:00