Gary Lockyer 55fb0c2f67 CVE-2019-19344 kcc dns scavenging: Fix use after free in dns_tombstone_records_zone ...

ldb_msg_add_empty reallocates the underlying element array, leaving
old_el pointing to freed memory.

This patch takes two defensive copies of the ldb message, and performs
the updates on them rather than the ldb messages in the result.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=14050

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>

2020-01-10 11:56:20 +01:00

..

auth

s4:auth: Fix debug statement in gensec_gssapi

2019-05-17 07:18:30 +00:00

build/pasn1

…

cldap_server

cldap: clear remote address after cldap_dse_fill

2018-05-31 09:54:18 +02:00

client

s4:client: Fix size types and loop

2018-04-03 20:20:10 +02:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

dnsp.idl: fix dnsp_ip4_array definition

2019-08-08 07:32:20 +00:00

dsdb

CVE-2019-19344 kcc dns scavenging: Fix use after free in dns_tombstone_records_zone

2020-01-10 11:56:20 +01:00

echo_server

source4/smbd: Do not overstamp the process model with "single"

2017-10-19 05:33:10 +02:00

heimdal

CVE-2019-14870: heimdal: enforce delegation_not_allowed in S4U2Self

2019-11-29 11:55:44 +01:00

heimdal_build

heimdal: Fix build with system provided heimdal library

2018-07-10 07:30:26 +02:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

CVE-2019-14870: mit-kdc: enforce delegation_not_allowed flag

2019-11-29 12:18:28 +01:00

ldap_server

ldap server: generate correct referral schemes

2019-06-21 07:56:17 +00:00

lib

Revert "s4:messaging: make sure only imessaging_client_init() can be used with a wrapper tevent_context wrapper"

2019-08-08 07:32:21 +00:00

libcli

s4:libcli/raw: add RAW_FILEINFO_NORMALIZED_NAME_INFORMATION support

2019-05-17 07:18:29 +00:00

libnet

s4/libnet: Fix joining a Windows pre-2008R2 DC

2019-07-08 16:24:31 +00:00

librpc

s4:librpc: Fix installation of Samba

2019-03-22 13:39:46 +00:00

nbt_server

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

ntp_signd

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

ntvfs

s4:ntvfs: Do not free eadb before we printed an error

2019-05-17 07:18:31 +00:00

param

param: Add non-global smb.cfg option (support 2 different smb.confs)

2018-06-28 03:34:27 +02:00

rpc_server

CVE-2019-14861: s4-rpc/dnsserver: Avoid crash in ldb_qsort() via dcesrv_DnssrvEnumRecords)

2019-11-29 11:55:44 +01:00

script

s4/script: convert print func to be py2/py3 compatible

2018-03-23 07:28:24 +01:00

scripting

undoguididx: Add "or later" to warning about using tools from Samba 4.8

2019-08-28 07:36:29 +00:00

selftest

CVE-2019-14902 selftest: Add test for replication of inherited security descriptors

2020-01-10 11:56:20 +01:00

setup

s4:provision: split out provision_self_join_modify_schema.ldif

2019-06-13 10:21:58 +00:00

smb_server

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

smbd

s4-server: Open and close a transaction on sam.ldb at startup

2019-03-11 08:59:33 +00:00

torture

selftest: Add test to confirm ACL inheritence really happens

2020-01-10 11:56:20 +01:00

utils

tests/demote: replace demote test bash script to python

2018-06-07 04:21:17 +02:00

web_server

s4/webserver: initialise optional parameter

2018-04-13 07:27:14 +02:00

winbind

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

wrepl_server

source4/smbd: Do not overstamp the process model with "single"

2017-10-19 05:33:10 +02:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

Do not install smbclient4 and nmblookup4

2014-04-15 03:25:13 +02:00