Joseph Sutton a74571b49f CVE-2023-0614 ldb: Filter on search base before redacting message ...

Redaction may be expensive if we end up needing to fetch a security
descriptor to verify rights to an attribute. Checking the search scope
is probably cheaper, so do that first.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15270

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2023-03-20 10:03:38 +01:00

..

dlinklist.h

DLIST_REMOVE: clang: Fix dereference of a null pointer warning

2019-06-11 12:10:17 +00:00

ldb_errors.h

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

ldb_handlers.h

ldb: Expose ldb_handler_fold() funcion

2011-07-28 15:20:51 +10:00

ldb_module.h

CVE-2023-0614 ldb: Prevent disclosure of confidential attributes

2023-03-20 10:03:38 +01:00

ldb_private.h

CVE-2023-0614 ldb: Filter on search base before redacting message

2023-03-20 10:03:38 +01:00

ldb.h

CVE-2022-32746 ldb: Add functions for appending to an ldb_message

2022-07-24 09:20:21 +02:00