Andreas Schneider ec7dfedccf s3:auth: Avoid passing freed pamh pointer to funcitons using it ...

"Error: USE_AFTER_FREE (CWE-416):
samba-4.20.0rc2/source3/auth/pampass.c:466: freed_arg: ""pam_end"" frees ""pamh"".
samba-4.20.0rc2/source3/auth/pampass.c:467: pass_freed_arg: Passing freed pointer ""pamh"" as an argument to ""smb_pam_error_handler"".
  465|   	if( pamh != NULL ) {
  466|   		pam_error = pam_end(pamh, 0);
  467|-> 		if(smb_pam_error_handler(pamh, pam_error, ""End Cleanup Failed"", 2) == True) {
  468|   			DEBUG(4, (""smb_pam_end: PAM: PAM_END OK.\n""));
  469|   			return True;"

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Noel Power <npower@samba.org>

2024-06-28 11:39:33 +00:00

..

auth_builtin.c

s3:auth: Fix code spelling

2023-07-05 06:34:32 +00:00

auth_generic.c

s3:gse: Implement gensec_gse_security_by_oid()

2024-05-14 10:18:31 +00:00

auth_ntlmssp.c

auth: Store group attributes in auth_user_info_dc

2023-02-08 00:03:39 +00:00

auth_sam.c

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-09 19:45:33 +00:00

auth_samba4.c

s3:auth: Add missing newlines to logging messages

2023-08-08 04:39:37 +00:00

auth_unix.c

auth: Fix a typo

2021-09-07 18:26:33 +00:00

auth_util.c

s3:auth: Allow 'Unix Users' and 'Unix Groups' to create a local token

2023-12-01 08:06:44 +00:00

auth_winbind.c

winbind: Log NOT_IMPLEMENTED as debug

2024-03-27 02:15:31 +00:00

auth.c

s3:auth: Use new debug macros for logging

2023-07-05 06:34:32 +00:00

check_samsec.c

s3:auth: Fix code spelling

2023-07-05 06:34:32 +00:00

pampass.c

s3:auth: Avoid passing freed pamh pointer to funcitons using it

2024-06-28 11:39:33 +00:00

pass_check.c

s3:auth: Fix code spelling

2023-07-05 06:34:32 +00:00

proto.h

s3:auth: Fix code spelling

2023-07-05 06:34:32 +00:00

server_info_sam.c

s3: auth: Andrew noticed f585f01148ab2d8f84c96b12e018742f5f17bcb0 doesn't keep the same logic.

2021-09-08 06:38:21 +00:00

server_info.c

auth: Shorten long SID flags combinations

2023-02-08 00:03:39 +00:00

token_util.c

Revert "token_util.c: prefer capabilities over become_root"

2024-03-27 10:47:23 +00:00

user_info.c

pdb: Reduce code duplication in make_user_info()

2018-10-09 01:22:53 +02:00

user_krb5.c

CVE-2020-25717: s3-auth: fix MIT Realm regression

2021-12-03 12:05:42 +00:00

user_util.c

lib: Give lib/util/util_file.c its own header file

2024-04-16 23:51:45 +00:00

wscript_build

s3:smbd: Remove NIS support

2021-04-22 17:57:30 +00:00