mirror of
https://github.com/samba-team/samba.git
synced 2025-01-10 01:18:15 +03:00
302098c325
If the binding string ends with "[", we were setting options to an empty string, then asking for 'options[strlen(options)-1]', which UBSan dosn't like because the offset evaluates to (size_t)0xFFFFF... causing pointer overflow. I believe this is actually well defined in practice, but we don't want to be in the habit of leaving sanitiser warnings in code parsing untrusted strings. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> |
||
---|---|---|
.. | ||
binding_handle.c | ||
binding.c | ||
dcerpc_error.c | ||
dcerpc_util.c | ||
dcesrv_auth.c | ||
dcesrv_core.c | ||
dcesrv_core.h | ||
dcesrv_handles.c | ||
dcesrv_mgmt.c | ||
dcesrv_reply.c | ||
rpc_common.h |