1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-10 01:18:15 +03:00
samba-mirror/source4/auth/tests
Stefan Metzmacher a1136ed2e0 CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting()
This fixes a use after free problem introduced by
commit 7b8e32efc3,
which has msg = current; which means the lifetime
of the 'msg' memory is no longer in the scope of th
caller.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15253

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit 1414269dcc)

Autobuild-User(v4-16-test): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(v4-16-test): Mon Dec 12 15:52:22 UTC 2022 on sn-devel-184
2022-12-12 15:52:22 +00:00
..
heimdal_unwrap_des.c CVE-2022-3437 s4/auth/tests: Add unit tests for unwrap_des3() 2022-10-24 07:27:37 +02:00
kerberos.c auth:creds: Remove unused credentials autoproto header 2020-08-19 16:22:40 +00:00
sam.c CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting() 2022-12-12 15:52:22 +00:00