Douglas Bagnall 63be840120 pytest: security_descriptors test for repetitive ACLs ...

If there are multiple identical ACEs in an SDDL ACL, Windows will decode
them all and put extra trailing zeroes at the end of the ACL.

In contrast, Samba will decode the ACEs and not put extra zeroes at the
end.

The problem comes when Samba tries to read a binary ACL from Windows that
has the extra zeroes, because Samba's ACL size calculation is based on
the size of its constituent ACEs, not the ACL size field.

There is no good reason for an ACL to have repeated ACEs, but they could
be added accidentally.

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2023-09-26 23:45:35 +00:00

..

examples

python: Remove redundant assignments

2022-05-10 05:19:34 +00:00

samba

pytest: security_descriptors test for repetitive ACLs

2023-09-26 23:45:35 +00:00

modules.c

python: Check return value of talloc_strndup()

2023-08-08 04:39:37 +00:00

modules.h

python: Remove const from PyList_AsStringList()

2023-07-21 05:23:32 +00:00

py3compat.h

py3compat: remove obsolete comments

2021-03-17 17:10:32 +00:00

pyglue.c

pyglue: Add missing whitespace in docstrings

2023-08-08 04:39:37 +00:00

wscript

python: Add glue.burn_commandline() method

2023-07-21 05:23:32 +00:00