Andrew Bartlett c0dfda35f7 passdb: Avoid use-after-free when setting a plaintext password ...

The issue here is that pdb_set_plaintext_passwd() re-used the memory from pdb_get_pw_history() as input

We need to free this after we copy and set it.

Found by AddressSanitizer

Andrew Bartlett

Change-Id: I4e148e23ccbbe5444c969ff8f91709791c7696bb
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Kamen Mazdrashki <kamenim@samba.org>

2014-09-08 07:26:34 +02:00

..

ABI

passdb: Allow a passdb module to do idmap for everything

2014-06-16 00:26:26 +02:00

account_pol.c

dbwrap: add a dbwrap_flags argument to db_open()

2014-02-07 16:06:06 +01:00

login_cache.c

tdb_compat: Higher level API fixes.

2011-06-20 11:18:35 +02:00

lookup_sid.c

passdb: add missing newline to debug message in get_primary_group_sid()

2014-08-09 00:44:06 +02:00

lookup_sid.h

s3:passdb: remove a forward declaration of wbcSidToUnixId that has become unnecessary

2012-05-02 13:17:54 +02:00

machine_account_secrets.c

secrets: Ensure we store the secureChannelType when written to secrets.ldb

2014-07-04 02:52:35 +02:00

machine_sid.c

s3:passdb formatting changes

2012-09-27 04:36:52 +02:00

machine_sid.h

s3: rename sid_check_is_in_our_domain() to sid_check_is_in_our_sam()

2012-07-12 18:36:02 +02:00

passdb.c

param: rename lp function and variable from 'guestaccount' to 'guest_account'

2014-02-07 16:19:10 -08:00

pdb_compat.c

s3-passdb: add passdb.h where needed.

2011-03-30 01:13:07 +02:00

pdb_get_set.c

passdb: Avoid use-after-free when setting a plaintext password

2014-09-08 07:26:34 +02:00

pdb_interface.c

lib/util: move memcache.[ch] to the toplevel 'samba-util' library

2014-07-18 15:43:33 +02:00

pdb_ipa.c

passdb-machine_account_secrets: Remove #if SAMBA_BUILD_ == 4 now we only have the waf build

2013-05-28 12:17:12 +10:00

pdb_ipa.h

s3-passdb: split out passdb/pdb_ipa.h.

2011-10-11 12:15:36 +02:00

pdb_ldap_schema.c

s3-passdb: Remove obsolte ldapsam_compat support.

2012-07-03 21:56:49 +02:00

pdb_ldap_schema.h

s3-passdb: Remove obsolte ldapsam_compat support.

2012-07-03 21:56:49 +02:00

pdb_ldap_util.c

loadparm: make the source3/ lp_ functions take an explicit TALLOC_CTX *.

2012-07-18 15:07:23 +09:30

pdb_ldap_util.h

s3: move smbldap_util to pdb_ldap_util.

2011-11-16 12:26:26 +01:00

pdb_ldap.c

s3: Always cache idmapping results of pdb backend.

2014-05-03 04:14:05 +02:00

pdb_ldap.h

Rename pdb_ldap to pdb_ldapsam

2013-02-06 11:51:11 +01:00

pdb_nds.c

Rename pdb_ldap to pdb_ldapsam

2013-02-06 11:51:11 +01:00

pdb_nds.h

s3-passdb: split out passdb/pdb_nds.h.

2011-10-11 10:41:29 +02:00

pdb_samba_dsdb.c

passdb: Use sam_get_results_trust() and implement pdb_samba_dsdb_get_trusteddom_pw

2014-09-01 00:36:42 +02:00

pdb_secrets.c

s3-passdb: wrap secrets.tdb accessors used by PDB modules

2012-09-07 12:31:42 +02:00

pdb_secrets.h

s3-passdb: trying to decouple passdb and secrets a little.

2012-01-18 14:46:18 +01:00

pdb_smbpasswd.c

param: rename lp function and variable from "renameuser_script" to "rename_user_script"

2014-02-07 16:19:16 -08:00

pdb_smbpasswd.h

s3-passdb: split out passdb/pdb_smbpasswd.h.

2011-10-10 20:14:46 +02:00

pdb_tdb.c

param: rename lp function and variable from "renameuser_script" to "rename_user_script"

2014-02-07 16:19:16 -08:00

pdb_tdb.h

s3-passdb: split out passdb/pdb_tdb.h.

2011-10-10 18:40:33 +02:00

pdb_unixid.c

s3-passdb: add unixid_from_uid/unixid_from_gid/unixid_from_both API

2012-05-23 17:51:50 +03:00

pdb_util.c

s3:passdb/pdb_util make pdb_create_builtin consider whether backend deals with BUILTIN

2013-06-21 12:49:10 +02:00

pdb_wbc_sam.c

s3-group-mapping: Remove fstrings from GROUP_MAP.

2011-10-12 19:28:12 +02:00

pdb_wbc_sam.h

s3-passdb: split out passdb/pdb_wbc_sam.h.

2011-10-10 18:40:40 +02:00

py_passdb.c

s3:passdb: Fix the use of uninitialized scalar variable.

2014-02-24 09:43:44 +05:30

secrets_lsa.c

s3-secrets: add lsa_secret passdb api.

2011-07-31 22:37:26 +02:00

secrets.c

lib-util: rename memdup to smb_memdup and fix all callers

2014-04-16 20:39:08 +02:00

wscript_build

build: get rid of source strings from source3/passdb/wscript_build

2013-09-24 23:00:38 +02:00