Jeremy Allison 9cc7d3df94 s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(). ...

cli_smb2_close_fnum_recv() uses tevent_req_simple_recv_ntstatus(req), which
frees req, then uses the state pointer which was owned by req.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13171

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Ralph Böhme <slow@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Thu Nov 30 05:47:12 CET 2017 on sn-devel-144

(cherry picked from commit 5c8032b6b8)

Autobuild-User(v4-6-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-6-test): Tue Dec  5 14:29:20 CET 2017 on sn-devel-144

2017-12-05 14:29:20 +01:00

..

ABI

libsmb: Implement smbc_notify

2015-07-10 09:35:13 +02:00

async_smb.c

s3: libsmb: Add uint16_t addtional_flags2 to cli_smb_req_create().

2016-08-19 20:03:12 +02:00

auth_generic.c

s3:auth_generic: add "ntlmssp_resume_ccache" backend in auth_generic_client_prepare()

2016-03-10 06:52:28 +01:00

cli_smb2_fnum.c

s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv().

2017-12-05 14:29:20 +01:00

cli_smb2_fnum.h

s3: smbclient: Implement "volume" command over SMB2.

2017-11-22 09:48:18 +01:00

cliconnect.c

s3:libsmb: Print the kinit failed message with DBGLVL_NOTICE

2017-08-28 10:47:24 +02:00

clidfs.c

CVE-2017-12151: s3:libsmb: make use of cli_state_is_encryption_on()

2017-09-04 11:29:53 +02:00

clidgram.c

Convert all uint32/16/8 to _t in source3/libsmb.

2015-05-13 19:11:23 +02:00

clidgram.h

Fix bug #8953 - winbind can hang as nbt_getdc() has no timeout.

2012-05-22 16:25:14 -07:00

clientgen.c

CVE-2017-12151: s3:libsmb: add cli_state_is_encryption_on() helper function

2017-09-04 11:29:43 +02:00

clierror.c

Convert all uint32/16/8 to _t in source3/libsmb.

2015-05-13 19:11:23 +02:00

clifile.c

s3: libsmb: Add cli_smb2_ftruncate(), plumb into cli_ftruncate().

2017-01-04 12:22:12 +01:00

clifsinfo.c

s3: smbclient: Implement "volume" command over SMB2.

2017-11-22 09:48:18 +01:00

clilist.c

s3: libsmb: Add return args to clistr_is_previous_version_path().

2016-08-22 19:10:22 +02:00

climessage.c

s3: libsmb: Add uint16_t additional_flags2 arg to cli_smb_send().

2016-08-19 20:03:11 +02:00

clioplock.c

s3: libsmb: Add uint16_t additional_flags2 arg to cli_smb_send().

2016-08-19 20:03:11 +02:00

cliprint.c

s3:libsmb: get rid of cli_state_server_time_zone

2012-05-28 14:49:48 +02:00

cliquota.c

cliquota: support setting file system quota via SMB2

2016-10-04 02:00:23 +02:00

clirap2.c

s3:libsmb/clirap: remove unused cli_get_server_*() functions

2016-07-06 22:41:41 +02:00

clirap.c

s3: libsmb: Add cli_smb2_setpathinfo(), to be called by cli_setpathinfo_basic().

2017-08-14 14:36:20 +02:00

clirap.h

s3:libsmb/clirap: remove unused cli_get_server_*() functions

2016-07-06 22:41:41 +02:00

clireadwrite.c

s3:libsmb fix a typo

2016-09-14 02:06:17 +02:00

clisecdesc.c

Convert all uint32/16/8 to _t in source3/libsmb.

2015-05-13 19:11:23 +02:00

clispnego.c

s3:libsmb: remove unused functions in clispnego.c

2016-03-10 06:52:30 +01:00

clistr.c

s3: libsmb: Add return args to clistr_is_previous_version_path().

2016-08-22 19:10:22 +02:00

clisymlink.c

s3: libsmb: Add uint16_t addtional_flags2 to cli_trans_send().

2016-08-19 20:03:12 +02:00

clitrans.c

s3: libsmb: Add uint16_t addtional_flags2 to cli_trans_send().

2016-08-19 20:03:12 +02:00

conncache.c

lib: Use "mem_ctx" arg in gencache_get

2013-09-05 20:09:21 +02:00

dsgetdcname.c

dsgetdcname: fix flag check

2016-03-07 22:16:20 +01:00

errormap_wbc.c

s3-errormap: move (unused) map_nt_error_from_wbcErr out of errormap.

2011-02-25 01:08:41 +01:00

errormap_wbc.h

source3/libsmb/errormap_wbc.h: fix licence/copyright

2011-06-10 15:12:27 +02:00

errormap.c

Change all uses of uint32/16/8 in proto.h to uint32_t/16_t/8_t.

2015-04-29 23:42:20 +02:00

libsmb_cache.c

Fix some blank line endings

2013-06-21 19:57:06 +02:00

libsmb_compat.c

libsmb: Implement smbc_notify

2015-07-10 09:35:13 +02:00

libsmb_context.c

CVE-2017-12151: s3:libsmb: make use of cli_state_is_encryption_on()

2017-09-04 11:29:53 +02:00

libsmb_dir.c

s3: libsmb: Fix use-after-free when accessing pointer *p.

2017-07-24 02:24:33 +02:00

libsmb_file.c

s3: libsmbclient: Use cache targetcli in SMBC_splice_ctx calls also.

2015-06-10 04:09:36 +02:00

libsmb_misc.c

Convert all uint32/16/8 to _t in source3/libsmb.

2015-05-13 19:11:23 +02:00

libsmb_path.c

Fix some blank line endings

2013-06-21 19:57:06 +02:00

libsmb_printjob.c

libsmb: Fix CID 1034606 Incorrect pointer comparison

2015-09-09 21:33:49 +02:00

libsmb_server.c

libsmbclient: Allow server (NetApp) to return STATUS_INVALID_PARAMETER from an echo.

2017-11-17 10:03:14 +01:00

libsmb_setget.c

libsmb: Implement smbc_notify

2015-07-10 09:35:13 +02:00

libsmb_stat.c

Convert all uint32/16/8 to _t in source3/libsmb.

2015-05-13 19:11:23 +02:00

libsmb_thread_impl.c

…

libsmb_thread_posix.c

…

libsmb_xattr.c

libsmb: Use fstr_sprint in convert_sid_to_string

2015-06-26 22:35:02 +02:00

libsmb.h

s3:libsmb: Add in the core of the libsmb client SMB2 functions.

2013-08-15 09:07:06 +02:00

namecache.c

namecache: fix uninitialised pointer returns

2014-09-13 03:21:39 +02:00

namequery_dc.c

s3-kerberos: remove unused kdc_name from create_local_private_krb5_conf_for_domain().

2014-03-07 18:43:57 +01:00

namequery.c

libsmb: Add name_status_lmhosts

2017-01-03 16:04:27 +01:00

nmblib.c

Convert all uint32/16/8 to _t in source3/libsmb.

2015-05-13 19:11:23 +02:00

nmblib.h

source3/libsmb/nmblib.h: fix licence/copyright

2011-06-10 15:12:31 +02:00

passchange.c

s3:libsmb: Pass domain to remote_password_change()

2017-08-28 10:47:24 +02:00

proto.h

Merge tag 'samba-4.6.8' into v4-6-test

2017-09-20 13:00:48 +02:00

pylibsmb.c

CVE-2017-12150: s3:pylibsmb: make use of SMB_SIGNING_DEFAULT for 'samba.samba3.libsmb_samba_internal'

2017-09-04 11:28:15 +02:00

reparse_symlink.c

s3: Fix symlink_reparse_buffer_parse

2011-07-03 11:31:29 +02:00

samlogon_cache.c

samlogon_cache: Rename "user_sid" to "sid"

2016-12-16 17:38:19 +01:00

samlogon_cache.h

samlogon_cache: Rename "user_sid" to "sid"

2016-12-16 17:38:19 +01:00

smb_share_modes.c

Convert all uint32/16/8 to _t in source3/libsmb.

2015-05-13 19:11:23 +02:00

smbclient.pc.in

libsmbclient: add ABI checking and pc file

2011-10-18 11:24:55 +11:00

smberr.c

Change all uses of uint32/16/8 in proto.h to uint32_t/16_t/8_t.

2015-04-29 23:42:20 +02:00

smbsock_connect.c

s3:libsmb: remove pending requests as early as possible via a smbsock_any_connect_cleanup() hook

2015-06-12 17:08:17 +02:00

trustdom_cache.c

Change all uses of uint32/16/8 in proto.h to uint32_t/16_t/8_t.

2015-04-29 23:42:20 +02:00

trusts_util.c

s3:trusts_util: make use the workstation password change more robust

2017-07-13 20:01:29 +02:00

unexpected.c

lib: Introduce util_tsock.h

2016-01-10 22:24:17 +01:00

wscript

s3:waf: Make PARAM and SMBREGISTRY a subsystem of smbconf only

2016-12-04 16:35:22 +01:00