1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-06 13:18:07 +03:00
samba-mirror/lib/ldb/ldb_key_value
Joseph Sutton a74571b49f CVE-2023-0614 ldb: Filter on search base before redacting message
Redaction may be expensive if we end up needing to fetch a security
descriptor to verify rights to an attribute. Checking the search scope
is probably cheaper, so do that first.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15270

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-20 10:03:38 +01:00
..
ldb_kv_cache.c lib ldb ldb_key_value: csbuild unused parm module 2019-06-13 07:16:22 +00:00
ldb_kv_index.c CVE-2023-0614 ldb: Filter on search base before redacting message 2023-03-20 10:03:38 +01:00
ldb_kv_search.c CVE-2023-0614 ldb: Filter on search base before redacting message 2023-03-20 10:03:38 +01:00
ldb_kv.c CVE-2021-3670 ldb: Confirm the request has not yet timed out in ldb filter processing 2021-11-25 01:41:30 +00:00
ldb_kv.h CVE-2023-0614 ldb: Make use of ldb_filter_attrs_in_place() 2023-03-20 10:03:38 +01:00