Gary Lockyer 3149ea0a8a CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decode ... Add search request size limits to ldap_decode calls. The ldap server uses the smb.conf variable "ldap max search request size" which defaults to 250Kb. For cldap the limit is hard coded as 4096. Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>		2020-05-04 02:59:32 +00:00
..
loadparm_ctx.c	param: remove now unused lp_string()	2019-11-27 10:25:38 +00:00
loadparm.c	CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decode	2020-05-04 02:59:32 +00:00
pyparam.c	s3: squash 'cast between incompatible function types' warning	2019-05-16 17:55:17 +00:00
service.c	smbdotconf: mark "usershare path" with substitution="1"	2019-11-27 10:25:36 +00:00
test_lp_load.c	s3:param: Use C99 initializer for poptOption in test_lp_load	2019-01-28 10:29:15 +01:00
util.c
wscript_build	build: Remove bld.gen_python_environments()	2019-03-21 04:06:14 +00:00