Jeremy Allison 2711b6600e CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers. ...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13453

CVE-2018-10858: Insufficient input validation on client directory
		listing in libsmbclient.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

2018-08-13 09:13:35 +02:00

..

auth

auth: Use "all_zero" where appropriate

2017-01-03 16:04:28 +01:00

build

…

client

s3: client: Rename <oldname> to <link_target> in cmd_symlink() and cli_posix_symlink().

2017-12-13 10:45:13 +01:00

exports

…

groupdb

Update smbrun to allow for settings environment variables.

2016-10-13 04:26:26 +02:00

include

sysacls: change datatypes to 32 bits

2018-01-02 10:01:10 +01:00

intl

lang_tdb: don't leak lock_path or data_path onto talloc tos

2014-11-03 23:46:05 +01:00

lib

g_lock: fix cleanup of stale entries in g_lock_trylock()

2017-12-22 22:11:00 +01:00

libads

s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here.

2018-04-11 12:56:12 +02:00

libgpo

werror: replace WERR_INVALID_PARAM with WERR_INVALID_PARAMETER in source3/libgpo/

2016-09-28 00:04:22 +02:00

libnet

libnet_join: fix "net rpc oldjoin"

2017-11-29 12:59:34 +01:00

librpc

smbd: Fix channel sequence number checks for long-running requests

2018-03-08 21:55:23 +01:00

libsmb

CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers.

2018-08-13 09:13:35 +02:00

locale

s3: fix encryption help messages

2015-12-22 02:22:50 +01:00

locking

s3/locking: make find_share_mode_entry public

2017-06-02 10:01:16 +02:00

modules

vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async

2018-04-11 12:56:12 +02:00

nmbd

nmbd: xfile->stdio

2016-12-11 11:17:24 +01:00

param

s3/loadparm: don't mark IPC$ as autoloaded

2017-12-05 10:32:10 +01:00

passdb

s3:passdb: Make sure the salt is fully initialized before passing

2017-11-02 13:01:22 +01:00

printing

s3:printing: remove double PRINT_SPOOL_PREFIX define

2016-12-21 18:35:12 +01:00

profile

s3-profile: reduce dependencies of smbprofile.h

2016-03-28 20:45:16 +02:00

registry

werror: replace WERR_OBJECT_PATH_INVALID with WERR_BAD_PATHNAME in source3/registry/reg_api_regf.c

2016-09-28 00:04:24 +02:00

rpc_client

libcli/auth: pass an array of nt_hashes to netlogon_creds_cli_auth*()

2017-07-13 20:01:28 +02:00

rpc_server

CVE-2018-1050: s3: RPC: spoolss server. Protect against null pointer derefs.

2018-03-13 10:28:56 +01:00

rpcclient

s3:trusts_util: pass dcname to trust_pw_change()

2017-07-13 20:01:28 +02:00

script

selftest: Add test for failing chdir call in smbd

2018-01-02 10:01:10 +01:00

selftest

selftest: Add test for failing chdir call in smbd

2018-01-02 10:01:10 +01:00

services

Update smbrun to allow for settings environment variables.

2016-10-13 04:26:26 +02:00

smbd

s3:smb2_server: correctly maintain request counters for compound requests

2018-04-12 17:26:40 +02:00

torture

winbind: Remove winbind_event_context

2017-11-22 09:48:18 +01:00

utils

net: groupmap cleanup should not delete BUILTIN mappings

2017-10-25 08:43:02 +02:00

web

…

winbindd

winbindd: idmap_rid: error code for failing id-to-sid mapping request

2017-12-14 16:20:49 +01:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

change-log

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

build: fix libceph-common detection

2018-03-13 10:28:56 +01:00

wscript_build

s3: locking: Move two leases functions into a new file.

2017-03-27 12:25:14 +02:00

wscript_configure_system_ncurses

Transition to waf 1.8: wrapped conf.check_cfg

2015-03-16 03:00:07 +01:00