1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
samba-mirror/source4/auth
Gary Lockyer f467727db5 CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth
Add maximum parse tree depth to the call to asn1_init, which will be
used to limit the depth of the ASN.1 parse tree.

Credit to OSS-Fuzz

REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2020-05-04 02:59:31 +00:00
..
gensec CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth 2020-05-04 02:59:31 +00:00
kerberos krb5: move disabling dns-canon to lower level init calls 2019-11-27 12:24:16 +00:00
ntlm s4-auth: Allow simple bind login of a user with an @ in the samAccountName 2020-02-14 17:13:33 +00:00
tests s4-auth-tests: Fix test_kerberos with MIT krb 2018-11-10 12:48:02 +01:00
auth.h s4:auth: add authsam_update_user_info_dc() that implements SID expanding for the local domain 2018-03-19 20:30:51 +01:00
pyauth.c s4/auth/py: avoid null deref with bad python arguments 2019-07-22 22:20:26 +00:00
pyauth.h pytalloc: Use consistent prefix for functions, add ABI file. 2011-08-10 15:36:21 +02:00
sam.c s4/auth/sam: silence CID 1435849 2019-05-09 22:39:27 +00:00
samba_server_gensec.c s4:auth: use talloc_reparent() in samba_server_gensec_krb5_start() 2017-05-30 08:06:07 +02:00
session.c auth: Simplify session generation 2019-11-06 20:36:34 +00:00
session.h
system_session.c s4-auth: fetch possible out of memory error 2018-10-11 10:28:18 +02:00
unix_token.c s4/auth: use talloc_alpha_strcpy() in auth_session_info_fill_unix() 2020-02-06 10:17:43 +00:00
wscript_build build: Do not build selftest binaries for builds without --enable-selftest 2019-11-22 11:48:59 +00:00
wscript_configure s4:auth/gensec: remove unused and untested cyrus_sasl module 2015-06-23 22:12:08 +02:00