Ralph Boehme 99f2bbccbd CVE-2016-2114: s3:smbd: enforce "server signing = mandatory" ...

This fixes a regression that was introduced by commit
abb24bf8e874d525382e994af7ae432212775153
("s3:smbd: make use of better SMB signing negotiation").

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11687

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Ralph Boehme <slow@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

2016-04-12 19:25:26 +02:00

..

notifyd

notifyd: Do not include CTDB headers without CLUSTER_SUPPORT enabled

2015-11-03 15:15:56 +01:00

aio.c

s3/vfs: wrap async io function args inside struct vfs_aio_state

2016-03-02 01:22:13 +01:00

avahi_register.c

s3-param Remove special case for global_myname(), rename to lp_netbios_name()

2011-06-09 12:40:09 +02:00

blocking.c

dlist: remove unneeded type argument from DLIST_ADD_END()

2016-02-06 21:48:17 +01:00

close.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

conn_idle.c

Fix bug #9733 - smbcontrol close-share is not working.

2013-03-22 20:10:11 +01:00

conn_msg.c

s3:smbd/conn_msg: use talloc_get_type_abort() as private_data can't be NULL

2011-12-14 12:00:07 +01:00

conn.c

Add uint32_t share_access to vuid_cache_entry.

2013-01-09 15:28:48 +11:00

connection.c

s3:smbd: remove unused claim_connection/yield_connection

2012-10-19 12:15:03 +02:00

dfree.c

lib: Remove "includes.h" from util_file.c

2016-02-23 22:03:17 +01:00

dir.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

dmapi.c

Convert all uses of uint8/16/32 to _t in source3/smbd.

2015-05-06 04:14:14 +02:00

dnsregister.c

s3: include smbd/smbd.h where needed.

2011-03-30 01:13:08 +02:00

dosmode.c

s3: vfs: Use the new VFS functions for setting and getting DOS attributes.

2016-03-27 09:23:42 +02:00

durable.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

error.c

Convert all uses of uint8/16/32 to _t in source3/smbd.

2015-05-06 04:14:14 +02:00

fake_file.c

Convert three include files from uint32/16/8 to _t types as well as the source that includes them.

2015-05-01 19:15:10 +02:00

file_access.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

fileio.c

smbd: Fix line length & whitespace in write_file

2016-02-23 22:03:16 +01:00

filename.c

s3: smbd: DFS: Pass uint32_t ucf_flags through into resolve_dfspath_wcard().

2016-03-25 20:40:10 +01:00

files.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

globals.c

s3: smbd: Remove outstanding_aio_calls from globals.

2015-11-13 01:44:21 +01:00

globals.h

smbd:smb2: add request_counters_updated to the smbd_smb2_request struct

2016-03-22 00:23:21 +01:00

ipc.c

Convert all uses of uint8/16/32 to _t in source3/smbd.

2015-05-06 04:14:14 +02:00

lanman.c

Convert the few instances of int32 there were to int32_t.

2015-05-16 03:09:12 +02:00

mangle_hash2.c

lib/util: move memcache.[ch] to the toplevel 'samba-util' library

2014-07-18 15:43:33 +02:00

mangle_hash.c

smbd: Convert valid.dat to C code

2015-03-24 00:00:20 +01:00

mangle.c

param: rename lp function and variable from 'defaultcase' to 'default_case'

2014-02-07 16:19:10 -08:00

message.c

s3:smbd: use req->xconn in message.c

2014-08-06 09:51:14 +02:00

msdfs.c

s3: smbd: DFS: Pass uint32_t ucf_flags through into unix_convert().

2016-03-26 00:08:40 +01:00

negprot.c

CVE-2016-2114: s3:smbd: use the correct default values for "smb signing"

2016-04-12 19:25:25 +02:00

notify_fam.c

smbd: fix build with FAM support

2016-02-14 10:41:06 +01:00

notify_inotify.c

lib: Move sys_rw* to lib/util

2015-10-13 01:23:07 +02:00

notify_msg.c

notify: check for valid notify_ctx in notify_remove

2015-08-31 12:50:13 +02:00

notify.c

dlist: remove unneeded type argument from DLIST_ADD_END()

2016-02-06 21:48:17 +01:00

ntquotas.c

ntquotas - skip entry if the quota is zero

2016-03-31 20:30:10 +02:00

nttrans.c

smbd: do not cover up VFS failures to get quota

2016-03-31 20:30:11 +02:00

open.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

oplock_irix.c

param: rename lp function and variable from 'lockdir' to 'lock_directory'

2014-02-07 16:19:10 -08:00

oplock_linux.c

Wrap setting leases in become_root()/unbecome_root() to ensure correct delivery of signals.

2013-07-31 17:07:58 -07:00

oplock.c

s3:smbd/oplock obey kernel oplock setting when releasing oplocks

2016-01-06 08:58:56 +01:00

password.c

loadparm: rename lp[cfg]_pathname to lp[cfg]_path for consistency with docs

2014-02-03 13:26:13 +13:00

perfcount.c

loadparm: make the source3/ lp_ functions take an explicit TALLOC_CTX *.

2012-07-18 15:07:23 +09:30

pipes.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

posix_acls.c

s3: posix_acls. Always use STAT, not LSTAT here.

2016-03-24 22:57:16 +01:00

process.c

smbd: Simplify chroot option in smbd

2016-02-13 03:50:54 +01:00

proto.h

nt-quotas: vfs_get_ntquota() return NTSTATUS

2016-03-31 20:30:10 +02:00

pysmbd.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

quotas.c

smbd: remove quota support for some ancient OSs

2016-03-17 01:08:32 +01:00

reply.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

scavenger.c

smbd: Fix/simplify scavenger routines

2015-10-30 22:53:56 +01:00

scavenger.h

s3:smbd: add a scavenger process for disconnected durable handles

2013-04-18 13:15:13 +02:00

seal.c

s3:smbd: remove unused spnego related includes

2015-12-17 14:45:13 +01:00

sec_ctx.c

s3:smbprofile: improve profiling for the security context switching.

2014-11-19 20:51:37 +01:00

server_exit.c

Revert "s3: smbd: Tear down global_smbXsrv_client in the correct order."

2015-12-07 21:09:04 +01:00

server_reload.c

s3:smbd: use lp_load_with_shares() in reload_services().

2015-04-22 13:57:29 +02:00

server.c

s3-profile: reduce dependencies of smbprofile.h

2016-03-28 20:45:16 +02:00

service.c

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

session.c

s3:smbd/session: Added a routine find_sessions()

2013-09-10 11:32:46 -07:00

sesssetup.c

CVE-2016-2114: s3:smbd: enforce "server signing = mandatory"

2016-04-12 19:25:26 +02:00

share_access.c

param: rename lp function and variable from "writelist" to "write_list"

2014-02-07 16:19:16 -08:00

signing.c

s3:smbd: move sconn->smb1.signing_state to xconn->smb1.signing_state

2014-08-06 09:51:11 +02:00

smb2_break.c

smbXsrv: rename smb2srv_session_lookup -> smb2srv_session_lookup_conn

2015-07-29 18:26:07 +02:00

smb2_close.c

smbd:smb2_close: remove an irritating blank line

2016-01-22 01:55:09 +01:00

smb2_create.c

s3: smbd: Remove unneeded lp_posix_pathnames() check in SMB2 create.

2016-03-24 22:57:16 +01:00

smb2_flush.c

s3/vfs: wrap async io function args inside struct vfs_aio_state

2016-03-02 01:22:13 +01:00

smb2_getinfo.c

s3:smbd: mask security_information input values with SMB_SUPPORTED_SECINFO_FLAGS

2014-08-22 00:28:08 +02:00

smb2_glue.c

s3:smb2_glue: remove chained fsps from all connections in remove_smb2_chained_fsp()

2014-09-19 09:15:12 +02:00

smb2_ioctl_dfs.c

smb2_ioctl: split ioctl handler code on device type

2013-01-16 23:15:06 +01:00

smb2_ioctl_filesys.c

smbd: Use check_access_fsp where appropriate

2015-11-17 19:53:24 +01:00

smb2_ioctl_named_pipe.c

smbd: Fix CID 1035550 Structurally dead code

2013-08-12 17:25:54 +12:00

smb2_ioctl_network_fs.c

s3:smbd: only process fsctl_network_iface_info if multi channel is enabled

2016-01-26 10:40:44 +01:00

smb2_ioctl_private.h

smb2_ioctl: split ioctl handler code on device type

2013-01-16 23:15:06 +01:00

smb2_ioctl.c

s3:smb2_server: pass smbXsrv_connection to smbd_server_connection_terminate*()

2014-08-06 09:51:13 +02:00

smb2_keepalive.c

s3:smb2_keepalive: make use of smbd_smb2_generate_outbody()

2014-03-05 13:59:22 -08:00

smb2_lock.c

smbd: Fix CID 1273096 Dereference before null check

2015-06-23 22:12:09 +02:00

smb2_negprot.c

CVE-2016-2114: s3:smbd: use the correct default values for "smb signing"

2016-04-12 19:25:25 +02:00

smb2_notify.c

s3:smb2_server: use async smbprofile macros

2014-11-19 20:51:37 +01:00

smb2_query_directory.c

s3: smbd: Change dptr_create() to take a const struct smb_filename * instead of const char *.

2016-03-01 18:34:24 +01:00

smb2_read.c

lib: Move sys_rw* to lib/util

2015-10-13 01:23:07 +02:00

smb2_server.c

smbd:smb2: add some asserts before decrementing the counters

2016-03-22 00:23:21 +01:00

smb2_sesssetup.c

CVE-2016-2114: s3:smbd: use the correct default values for "smb signing"

2016-04-12 19:25:25 +02:00

smb2_setinfo.c

s3:smb2_setinfo: fix memory leak in the defer_rename case

2015-06-17 22:10:24 +02:00

smb2_tcon.c

s3:smb2_server: convert encryption desired and required bools to flags

2016-01-22 07:52:20 +01:00

smb2_write.c

s3:smb2_write: add simplified support for SMB2_WRITEFLAG_WRITE_UNBUFFERED

2015-05-08 13:00:28 +02:00

smbd_cleanupd.c

smbd: Move a message_send_all to the cleanupd

2015-11-16 17:55:36 +01:00

smbd_cleanupd.h

smbd: Implement a cleanup daemon

2015-11-16 14:51:33 +01:00

smbd.h

Convert all uses of uint8/16/32 to _t in source3/smbd.

2015-05-06 04:14:14 +02:00

smbXsrv_client.c

smbd: enable multi-channel if 'server multi channel support = yes' in the config

2016-03-15 20:58:19 +01:00

smbXsrv_open.c

smbd: Avoid an "else"

2016-03-09 21:51:52 +01:00

smbXsrv_session.c

smbd: Prevent a crash

2016-03-11 00:12:18 +01:00

smbXsrv_tcon.c

smbXsrv_tcon: factor fetch-locking of local record into function

2016-02-28 05:03:22 +01:00

smbXsrv_version.c

smbXsrv: don't leak lock_path onto talloc tos

2014-11-03 23:46:05 +01:00

srvstr.c

Convert all uses of uint8/16/32 to _t in source3/smbd.

2015-05-06 04:14:14 +02:00

statcache.c

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

statvfs.c

s3/statvfs: expose FILE_SUPPORTS_SPARSE_FILES capability

2015-03-09 21:27:07 +01:00

trans2.c

nt-quotas: vfs_get_ntquota() return NTSTATUS

2016-03-31 20:30:10 +02:00

uid.c

smbd: Change logging level for denied share access

2014-07-31 01:17:30 +02:00

utmp.c

param: rename lp function and variable from 'wtmpdir' to 'wtmp_directory'

2014-02-07 16:19:11 -08:00

vfs.c

vfs: Add helper to check for missing VFS functions

2016-04-06 00:15:17 +02:00