samba-mirror

mirror of https://github.com/samba-team/samba.git synced 2025-03-01 04:58:35 +03:00

History

Stefan Metzmacher 57f0b0c6c0 CVE-2016-2115: s4:libcli/raw: limit maxprotocol to NT1 in smb_raw_negotiate*()

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

2016-04-12 19:25:26 +02:00

clierror.c

…

clioplock.c

s4-libcli: Check return value of smbcli_request_setup().

2013-02-22 16:36:13 +01:00

clisession.c

s4:libcli/raw: setup a smbXcli_session for each smbcli_session

2012-07-23 22:13:29 +02:00

clisocket.c

s4:libcli/raw: make sure smbcli_transport_connect_send/recv correctly cleanup on error

2015-06-12 17:08:17 +02:00

clitransport.c

s4:libcli/raw: fix up the max_protocol value for the current transport connection

2014-11-27 16:45:05 +01:00

clitree.c

s4-libcli: Check return value of smbcli_request_setup().

2013-02-22 16:36:13 +01:00

interfaces.h

s4/client: add FS_SECTOR_SIZE_INFORMATION query support

2015-03-18 18:57:20 +01:00

libcliraw.h

CVE-2016-2115: s4:libcli/raw: add smbcli_options.min_protocol

2016-04-12 19:25:26 +02:00

rawacl.c

…

rawdate.c

…

raweas.c

Fix bug #10010 - Missing integer wrap protection in EA list reading can cause server to loop with DOS.

2013-08-05 14:39:04 +02:00

rawfile.c

s4:libcli/raw: s/SMBchkpth/SMBcheckpath

2011-07-12 16:50:55 +02:00

rawfileinfo.c

Ensure convert_string_XXX is always called with a valid converted_size pointer.

2011-03-29 21:01:49 +02:00

rawfsinfo.c

s4/ntvfs: support FS_SECTOR_SIZE_INFORMATION query-info

2015-03-18 18:57:21 +01:00

rawioctl.c

…

rawlpq.c

…

rawnegotiate.c

CVE-2016-2115: s4:libcli/raw: limit maxprotocol to NT1 in smb_raw_negotiate*()

2016-04-12 19:25:26 +02:00

rawnotify.c

s4:libcli/raw: implement on top of smbXcli_conn/req

2011-11-30 15:13:36 +01:00

rawreadwrite.c

s4:libcli/raw: Make flags2 and offset available to callers of readx

2014-08-30 00:27:13 +02:00

rawrequest.c

s4:libcli/raw: setup a smbXcli_tcon for each smbcli_tree

2012-07-24 18:44:05 +02:00

rawsearch.c

s4:libcli/raw: make short_name available in buffer

2014-12-04 22:11:08 +01:00

rawsetfileinfo.c

RAW_SFILEINFO_RENAME_INFORMATION_SMB2 sends 4 bytes of uninitialized data out on the network.

2011-08-27 07:48:29 +02:00

rawshadow.c

libcli: move ioctl function field defs to smb_constants

2011-10-19 15:44:29 +02:00

rawtrans.c

libcli/smb: pass down smbXcli_tcon to smb1cli_req_create/send() and smb1cli_trans*

2012-07-24 21:22:44 +02:00

README

…

request.h

…

signing.h

lib/param move source4 param code to the top level

2011-10-11 13:41:34 +11:00

smb_signing.c

build: Build with system md5.h on OpenIndiana

2013-06-19 21:32:36 +02:00

smb.h

libcli/smb: move some *TRANSACT_* flags to smb_constants.h

2014-01-07 08:37:38 +01:00

trans2.h

s4/client: add FS_SECTOR_SIZE_INFORMATION query support

2015-03-18 18:57:20 +01:00

README

Design notes for client library restructure:

1 - no references to cli_state should exist in libcli/raw.
2 - all interfaces to functions in this directory should use cli_session or cli_tree as
	the primary context structure