sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-26 21:57:41 +03:00
Code
samba-mirror/source3/smbd
History
Volker Lendecke 9fd1010553 smbd: Fix a use-after-free 
stat_cache_lookup() allocates its result on top of talloc_tos().
filename_convert_smb1_search_path() creates a talloc_stackframe(),
which makes the names which were supposed to be allocated on the "ctx"
parameter of filename_convert_smb1_search_path() go away too
early. Reparent the results from stat_cache_lookup() properly.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=14989

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Mar  1 20:59:55 UTC 2022 on sn-devel-184

(cherry picked from commit 8c97743511e4d53f795f2469a28aabfb96da0dfa)
2022-03-02 10:26:30 +00:00
..
notifyd
lib;smbd: Fix the -Os build by initializing variables
2021-08-06 17:22:30 +00:00
aio.c
s3: smbd: Move implicit call to lp_posix_cifsu_locktype() out of init_strict_lock_struct().
2022-01-06 15:11:38 +00:00
avahi_register.c
s3-smbd: use fruit:model string for mDNS registration
2019-01-15 21:27:20 +01:00
blocking.c
s3: smbd: Remove lock_flav argument from smbd_smb1_brl_finish_by_lock().
2022-01-06 15:11:38 +00:00
close.c
smbd: Introduce close_file_smb()
2022-02-14 17:46:14 +00:00
conn_idle.c
s3:rpc_server: Activate samba-dcerpcd
2021-12-10 14:02:30 +00:00
conn_msg.c
smbd: Add close-denied-share message
2020-01-15 21:25:35 +00:00
conn.c
s3: smbd: Factor out setting up case parameters for a share to a function - conn_setup_case_options().
2021-01-13 17:02:34 +00:00
connection.c
s3:param: make "servicename" a substituted option
2019-11-27 10:25:37 +00:00
dfree.c
smbd: Save a few lines with str_list_add_printf()
2022-01-18 20:22:38 +00:00
dir.c
smbd: NULL out "fsp" in close_file()
2022-02-14 17:46:14 +00:00
dmapi.c
…
dnsregister.c
…
dosmode.c
s3:smbd: Fix dereferencing null pointer "fsp"
2022-01-10 23:31:33 +00:00
durable.c
smbd: Replace SMB_VFS_CLOSE() calls with fd_close()
2021-12-30 11:03:35 +00:00
error.c
s3:smbd: Fix converity warning with _smb_setlen_large()
2018-05-16 21:30:23 +02:00
fake_file.c
smbd: Move the call to file_free() out of close_fake_file()
2022-02-14 17:46:14 +00:00
fd_handle.c
smbd: Assert we don't leak fd's in struct fd_handle
2021-12-30 11:54:17 +00:00
fd_handle.h
smbd: add fd_handle.[c|h]
2020-12-16 09:08:30 +00:00
file_access.c
s3: smbd: smbd_check_access_rights_fsp(). Add dirfsp parameter.
2021-06-09 13:14:31 +00:00
fileio.c
smbd: use fdos_mode() in mark_file_modified()
2020-12-16 09:08:31 +00:00
filename.c
smbd: Fix a use-after-free
2022-03-02 10:26:30 +00:00
files.c
smbd: Factor out fsp_unbind_smb() from file_free()
2022-02-14 17:46:14 +00:00
globals.c
smbd: let smbd_request_guid() use smb1req->xconn->channel_id
2021-03-06 02:20:05 +00:00
globals.h
s3: smbd: Remove now redundent lock_flav parameter from smbd_do_unlocking().
2022-01-06 16:03:28 +00:00
ipc.c
libsmb: Remove "trans_oob()" macro
2021-11-11 19:08:37 +00:00
lanman.c
source3: move lib/substitute.c functions out of proto.h
2021-11-11 13:49:32 +00:00
mangle_hash2.c
mangle_hash2: remove LOCK$ from list of reserved names
2021-08-24 19:26:59 +00:00
mangle_hash.c
smbd: Move fast_string_hash() to mangle_hash.c, the only user
2022-01-05 00:11:37 +00:00
mangle.c
smbdotconf: mark "mangling method" with constant="1"
2019-11-27 10:25:37 +00:00
message.c
source3: move lib/substitute.c functions out of proto.h
2021-11-11 13:49:32 +00:00
msdfs.c
s3: smbd: parse_dfs_path() can ignore wildcards.
2021-12-11 07:17:29 +00:00
negprot.c
s3: safe_string: do not include string_wrappers.h
2020-08-28 00:56:34 +00:00
notify_fam.c
…
notify_inotify.c
smbd: Align two integer types
2020-11-04 18:55:39 +00:00
notify_msg.c
notifyd: Factor out notify_walk() into its own file
2020-10-24 05:57:31 +00:00
notify.c
s3: smbd: smbd_check_access_rights_fsp(). Add dirfsp parameter.
2021-06-09 13:14:31 +00:00
ntquotas.c
smbd: add twrp arg to synthetic_smb_fname()
2020-05-05 19:18:40 +00:00
nttrans.c
smbd: NULL out "fsp" in close_file()
2022-02-14 17:46:14 +00:00
open.c
smbd: Only file_free() a self-created fsp in create_file_unixpath()
2022-02-14 18:36:26 +00:00
oplock_linux.c
lib;smbd: Fix the -Os build by initializing variables
2021-08-06 17:22:30 +00:00
oplock.c
smbd: use fh_[get|set]_gen_id()
2020-12-16 09:08:30 +00:00
password.c
smbd: RIP user_struct
2020-01-13 21:09:01 +00:00
perfcount.c
smbdotconf: mark "perfcount module" with substitution="1"
2019-11-27 10:25:36 +00:00
pipes.c
smbd: Make SID_SAMBA_SMB3 a static SID
2021-10-08 19:28:31 +00:00
posix_acls.c
s3: smbd: Explicitly code the semantics of "dos filemode" into the chown code.
2021-07-13 08:11:36 +00:00
process.c
s3:rpc_server: Activate samba-dcerpcd
2021-12-10 14:02:30 +00:00
proto.h
smbd: Introduce close_file_smb()
2022-02-14 17:46:14 +00:00
pysmbd.c
smbd: Replace SMB_VFS_CLOSE() calls with fd_close()
2021-12-30 11:03:35 +00:00
quotas.c
quotas: Check group quota for directory when SGID is set
2019-08-14 16:27:43 +00:00
reply.c
smbd: NULL out "fsp" in close_file()
2022-02-14 17:46:14 +00:00
scavenger.c
smbd: Give smbXsrv_open.c its own header file
2021-11-11 19:08:37 +00:00
scavenger.h
…
seal.c
…
sec_ctx.c
sec_ctx.c: Fix -Wunused-function warning on macOS
2021-10-13 01:42:35 +00:00
server_exit.c
s3:rpc_server: Activate samba-dcerpcd
2021-12-10 14:02:30 +00:00
server_reload.c
smbd: check lp_load_printers before reload via NetShareEnum
2021-11-08 13:27:40 +00:00
server.c
s3:smbd: handle --build-options without parsing smb.conf
2022-01-17 12:23:33 +00:00
service.c
source3: move lib/substitute.c functions out of proto.h
2021-11-11 13:49:32 +00:00
session.c
s3:smbd: fix SAFE_FREE() vs. TALLOC_FREE() in list_sessions()
2019-03-28 23:09:33 +00:00
sesssetup.c
source3: move lib/substitute.c functions out of proto.h
2021-11-11 13:49:32 +00:00
share_access.c
source3: move lib/substitute.c functions out of proto.h
2021-11-11 13:49:32 +00:00
signing.c
s3:smbd: Return NTSTATUS for srv_calculate_sign_mac()
2019-05-21 00:03:22 +00:00
smb1_utils.c
smbd: add need_fsa arg and logic to file_find_di_(first|next)
2020-12-16 09:08:31 +00:00
smb1_utils.h
lib: Move send_keepalive() to smbd/smb1_utils.c
2020-08-17 19:35:37 +00:00
smb2_break.c
s3:smbd: pass down smbXsrv_client to smbd_smb2_send_{oplock,lease}_break()
2020-07-08 15:54:40 +00:00
smb2_close.c
smbd: NULL out "fsp" in close_file()
2022-02-14 17:46:14 +00:00
smb2_create.c
smbd: NULL out "fsp" in close_file()
2022-02-14 17:46:14 +00:00
smb2_flush.c
smbd: use fsp_get_io_fd() when accessing a file or it's associated metadata
2020-12-16 09:08:30 +00:00
smb2_getinfo.c
s3: smbd: In smbd_smb2_getinfo_send(), use vfs_stat() utility function.
2021-12-15 18:36:31 +00:00
smb2_glue.c
s3:smbd: implement FSCTL_SMBTORTURE_FORCE_UNACKED_TIMEOUT
2020-07-08 15:54:40 +00:00
smb2_ioctl_dfs.c
s3: debug: smb2: Create a new DBGC_SMB2 debug class and mark all smbd/smb2_*.c files with it.
2018-03-22 02:15:13 +01:00
smb2_ioctl_filesys.c
s3: smbd: Move implicit call to lp_posix_cifsu_locktype() out of init_strict_lock_struct().
2022-01-06 15:11:38 +00:00
smb2_ioctl_named_pipe.c
Revert "smbd: add an effective {smb,smbd_smb2}_request->ev_ctx that holds the event context used for the request processing"
2019-01-11 23:11:16 +01:00
smb2_ioctl_network_fs.c
vfs: Add flags and xferlen args to SMB_VFS_OFFLOAD_READ_RECV
2021-10-08 19:28:32 +00:00
smb2_ioctl_private.h
s3: smbd: Split out smb2_ioctl_smbtorture() into a separate file.
2021-08-11 19:16:29 +00:00
smb2_ioctl_smbtorture.c
s3: smbd: Call smbd_fsctl_torture_async_sleep() when we get FSCTL_SMBTORTURE_FSP_ASYNC_SLEEP.
2021-08-11 19:16:29 +00:00
smb2_ioctl.c
smb2_ioctl: return BUFFER_TOO_SMALL in smbd_smb2_request_ioctl_done()
2021-12-01 11:04:29 +00:00
smb2_keepalive.c
s3: debug: smb2: Create a new DBGC_SMB2 debug class and mark all smbd/smb2_*.c files with it.
2018-03-22 02:15:13 +01:00
smb2_lock.c
s3: smbd: Remove now redundent lock_flav parameter from smbd_do_unlocking().
2022-01-06 16:03:28 +00:00
smb2_negprot.c
libcli/smb: actually make use of "client/server smb3 signing algorithms"
2021-07-15 00:06:31 +00:00
smb2_notify.c
smbd: Use NT_STATUS_NOTIFY_ENUM_DIR instead of STATUS_NOTIFY_ENUM_DIR
2020-06-22 12:07:38 +00:00
smb2_query_directory.c
s3: smbd: Use a helper variable in smbd_smb2_query_directory_send().
2021-11-16 20:21:37 +00:00
smb2_read.c
s3: smbd: Move implicit call to lp_posix_cifsu_locktype() out of init_strict_lock_struct().
2022-01-06 15:11:38 +00:00
smb2_server.c
smb2_server: skip tcon check and chdir_current_service() for FSCTL_QUERY_NETWORK_INTERFACE_INFO
2021-12-01 11:51:50 +00:00
smb2_sesssetup.c
source3: move lib/substitute.c functions out of proto.h
2021-11-11 13:49:32 +00:00
smb2_setinfo.c
s3: smbd: fix deferred renames
2021-03-31 06:13:39 +00:00
smb2_tcon.c
smb2_tcon: also try to cancel pending compound requests on tdis
2021-03-29 20:43:28 +00:00
smb2_write.c
s3: smbd: Move implicit call to lp_posix_cifsu_locktype() out of init_strict_lock_struct().
2022-01-06 15:11:38 +00:00
smbd_cleanupd.c
smbd: Remove unused brlock code
2019-06-20 17:18:19 +00:00
smbd_cleanupd.h
…
smbd.h
s3: smbd: UCF_ALWAYS_ALLOW_WCARD_LCOMP 0x00000002 is no longer used.
2021-12-11 07:17:29 +00:00
smbXsrv_client.c
smbXsrv_client: move the connection passing to smb2srv_client_mc_negprot_send/recv
2021-03-06 03:30:06 +00:00
smbXsrv_open.c
smbd: Give smbXsrv_open.c its own header file
2021-11-11 19:08:37 +00:00
smbXsrv_open.h
smbd: Give smbXsrv_open.c its own header file
2021-11-11 19:08:37 +00:00
smbXsrv_session.c
s3:smbd: make sure smbXsrv_session_update() doesn't segfault with table == NULL
2021-07-15 00:06:31 +00:00
smbXsrv_tcon.c
smbXsrv_{open,session,tcon}: protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records
2021-07-06 11:08:43 +00:00
smbXsrv_version.c
lib: Pass mem_ctx to lock_path()
2018-08-17 11:30:10 +02:00
srvstr.c
s3: safe_string: do not include string_wrappers.h
2020-08-28 00:56:34 +00:00
statcache.c
smbd: Move fast_string_hash() to mangle_hash.c, the only user
2022-01-05 00:11:37 +00:00
statvfs.c
statvfs: rename linux_statvfs to posix_statvfs
2019-01-11 02:53:57 +01:00
trans2.c
smbd: NULL out "fsp" in close_file()
2022-02-14 17:46:14 +00:00
uid.c
source3: move lib/substitute.c functions out of proto.h
2021-11-11 13:49:32 +00:00
utmp.c
s3/smbd: fix utmp hostname logging on Solaris
2019-01-10 22:46:11 +01:00
vfs.c
CVE-2021-44141: s3: smbd: Inside check_reduced_name() ensure we return the correct error codes when failing symlinks.
2022-01-31 14:26:10 +00:00