Andreas Schneider 6cadb1d695 s3:registry: Check for integer overflow ... "Error: INTEGER_OVERFLOW (CWE-190): samba-4.20.0rc2/source3/registry/regfio.c:175: tainted_data_argument: The check ""bytes_read < block_size"" contains the tainted expression ""bytes_read"" which causes ""block_size"" to be considered tainted. samba-4.20.0rc2/source3/registry/regfio.c:176: overflow: The expression ""block_size - bytes_read"" is deemed overflowed because at least one of its arguments has overflowed. samba-4.20.0rc2/source3/registry/regfio.c:176: overflow_sink: ""block_size - bytes_read"", which might have underflowed, is passed to ""read(file->fd, buffer + bytes_read, block_size - bytes_read)"". [Note: The source code implementation of the function has been overridden by a builtin model.] 174| 175| while ( bytes_read < block_size ) { 176|-> if ( (returned = read( file->fd, buffer+bytes_read, block_size-bytes_read )) == -1 ) { 177| DEBUG(0,(""read_block: read() failed (%s)\n"", strerror(errno) )); 178| return False;" Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>		2024-07-08 07:36:32 +00:00
..
tests
reg_api_util.c	registry3: Move registry_value_cmp() to its only user	2022-09-19 17:23:31 +00:00
reg_api_util.h	registry3: Move registry_value_cmp() to its only user	2022-09-19 17:23:31 +00:00
reg_api.c	libcli/security: Rename dup_nt_token() -> security_token_duplicate()	2023-09-26 23:45:36 +00:00
reg_api.h
reg_backend_current_version.c
reg_backend_db.c	s3:registry: Fix code spelling	2023-07-19 09:58:37 +00:00
reg_backend_db.h
reg_backend_hkpt_params.c
reg_backend_netlogon_params.c
reg_backend_perflib.c
reg_backend_printing.c
reg_backend_prod_options.c	CVE-2020-25717: Add FreeIPA domain controller role	2021-11-09 19:45:33 +00:00
reg_backend_shares.c
reg_backend_smbconf.c
reg_backend_tcpip_params.c
reg_cachehook.c
reg_cachehook.h
reg_db.h
reg_dispatcher.c	s3:registry: Initialize struct security_ace ace[]	2024-07-05 07:45:32 +00:00
reg_dispatcher.h
reg_format.c	s3:registry: Add missing newlines to logging messages	2023-08-08 04:39:38 +00:00
reg_format.h	s3:registry: Fix code spelling	2023-07-19 09:58:37 +00:00
reg_import.c
reg_import.h	s3:registry: Fix code spelling	2023-07-19 09:58:37 +00:00
reg_init_basic.c
reg_init_basic.h
reg_init_full.c
reg_init_full.h
reg_init_smbconf.c
reg_init_smbconf.h
reg_objects.c	registry3: Align function types to what is returned	2022-07-25 12:04:33 +00:00
reg_objects.h	registry3: Align function types to what is returned	2022-07-25 12:04:33 +00:00
reg_parse_dox.cfg	s3:registry: Fix code spelling	2023-07-19 09:58:37 +00:00
reg_parse_internal.c
reg_parse_internal.h	s3:registry: Fix code spelling	2023-08-14 04:57:34 +00:00
reg_parse_prs.c	s3:registry: Fix code spelling	2023-09-11 02:42:41 +00:00
reg_parse_prs.h
reg_parse.c	s3:registry: Add missing newlines to logging messages	2023-08-08 04:39:38 +00:00
reg_parse.h	s3:registry: Fix code spelling	2023-07-19 09:58:37 +00:00
reg_perfcount.c	s3:registry: Add missing return value checks	2024-06-24 06:14:36 +00:00
reg_perfcount.h
reg_util_internal.c
reg_util_internal.h
reg_util_token.c
reg_util_token.h
regfio.c	s3:registry: Check for integer overflow	2024-07-08 07:36:32 +00:00
regfio.h	s3:registry: Fix code spelling	2023-07-19 09:58:37 +00:00