Gary Lockyer 7127a615cb librpc ndr: Infinite loop parsing Suplemental creds ...

Fuzzing by Michael Hanselmann found an infinite loop parsing a malformed
supplemental credentials structure.  There are no server-side
network-accessible calls using this code.

This patch adds an ndrdump blackbox test to replicate the issue.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=13874

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2019-12-04 05:10:30 +00:00

..

emulate

traffic.py: avoid inefficient string concatenations

2019-09-24 12:22:44 +00:00

gp_parse

gp_inf: Read/write files with a UTF-16LE BOM in GptTmpl.inf

2019-07-19 02:20:47 +00:00

kcc

kcc_utils.py: avoid inefficient string concatenations

2019-09-24 12:22:44 +00:00

netcmd

samba-tool {user,group,computer,contact} show: avoid base64 encoded strings if possible

2019-11-29 00:44:40 +00:00

provision

samba-tool domain provision: Remove experimental OpenLDAP support

2019-08-30 08:32:30 +00:00

samba3

python/samba3: import passdb in the manner it is used

2018-11-01 05:08:14 +01:00

subunit

subunit/run.py: change shebang to python3

2019-03-07 13:03:56 +00:00

tests

librpc ndr: Infinite loop parsing Suplemental creds

2019-12-04 05:10:30 +00:00

__init__.py

python/samba: ignore encoding errors while reading files

2019-04-03 11:33:38 +00:00

colour.py

python/colour: add colourizing and switch functions

2018-05-31 01:57:17 +02:00

common.py

python: avoid useless work in dsdb_Dn.__cmp__

2018-11-01 05:08:12 +01:00

compat.py

python/samba: fix default params for PY3 ConfigParser

2018-12-10 10:38:22 +01:00

dbchecker.py

python/samba/dbchecker.py: typo fixes

2019-10-31 00:43:36 +00:00

descriptor.py

PEP8: fix E302: expected 2 blank lines, found 1

2018-08-24 07:49:29 +02:00

dnsserver.py

PEP8: fix E302: expected 2 blank lines, found 1

2018-08-24 07:49:29 +02:00

domain_update.py

python/domain_update: remove unused imports

2018-10-25 21:45:53 +02:00

drs_utils.py

drs_utils: Avoid invalid dereference of v8 requests

2018-11-06 07:15:33 +01:00

forest_update.py

python/forest_update: remove unused imports

2018-10-25 21:45:53 +02:00

getopt.py

python getopt: Add bytes option type

2019-07-02 02:23:08 +00:00

gp_ext_loader.py

python/gp_ext_loader: remove unused imports

2018-10-25 21:45:53 +02:00

gp_sec_ext.py

python/samba: PY3 port gpo.apply smbtorture test

2018-12-10 10:38:22 +01:00

gpclass.py

python/gpclass: Convert gpclass to use s3 SMB Python bindings

2019-01-17 01:40:29 +01:00

graph.py

py/graph: use 2.6 compatible check for set membership

2019-03-20 06:36:05 +00:00

hostconfig.py

PEP8: fix E302: expected 2 blank lines, found 1

2018-08-24 07:49:29 +02:00

idmap.py

PEP8: fix E302: expected 2 blank lines, found 1

2018-08-24 07:49:29 +02:00

join.py

join: Use a specific attribute order for the DsAddEntry nTDSDSA object

2019-07-24 04:18:21 +00:00

logger.py

logger: use color automatically for a tty

2018-11-21 10:46:20 +01:00

mdb_util.py

mdb_util: Better error message if lmdb-utils not installed

2018-11-09 21:07:47 +01:00

ms_display_specifiers.py

python/samba: port open to io.open for PY2/PY3 compat

2018-09-03 03:22:20 +02:00

ms_forest_updates_markdown.py

python/samba: PY3 port samba4.blackbox.functionalprep

2018-10-23 05:50:28 +02:00

ms_schema_markdown.py

PEP8: fix E305: expected 2 blank lines after class or function definition, found 1

2018-08-24 07:49:30 +02:00

ms_schema.py

python/samba: port open to io.open for PY2/PY3 compat

2018-09-03 03:22:20 +02:00

ndr.py

PEP8: fix E302: expected 2 blank lines, found 1

2018-08-24 07:49:29 +02:00

ntacls.py

Prevent samba-tool online backup crash

2019-08-17 03:50:39 +00:00

remove_dc.py

python/remove_dc: fix Exception construction

2018-11-01 05:08:13 +01:00

samdb.py

samba-tool: implement contact management commands

2019-07-04 02:07:21 +00:00

schema.py

schema.py: avoid inefficient string concatenations

2019-09-24 12:22:44 +00:00

sd_utils.py

PEP8: fix E231: missing whitespace after ','

2018-08-24 07:49:28 +02:00

sites.py

PEP8: fix E128: continuation line under-indented for visual indent

2018-08-24 07:49:27 +02:00

subnets.py

python/subnets: use the correct variable name

2018-11-01 05:08:11 +01:00

tdb_util.py

PEP8: fix E302: expected 2 blank lines, found 1

2018-08-24 07:49:29 +02:00

upgrade.py

classicupgrade: fix a a bytes-like object is required, not 'str' error

2019-09-23 12:58:20 +00:00

upgradehelpers.py

python/samba/upgradehelpers.py: typo fixes

2019-10-31 00:43:37 +00:00

uptodateness.py

python/uptodateness: cope with unknown invocation ID

2019-01-19 19:21:19 +01:00

xattr.py

python/xattr: remove unused variable

2018-11-01 05:08:14 +01:00