Andrew Bartlett b6e9c4b8bb CVE-2018-16841 heimdal: Fix segfault on PKINIT with mis-matching principal ...

In Heimdal KRB5_KDC_ERR_CLIENT_NAME_MISMATCH is an enum, so we tried to double-free
mem_ctx.

This was introduced in 9a0263a7c316112caf0265237bfb2cfb3a3d370d for the
MIT KDC effort.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13628

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>

2018-11-28 08:22:23 +01:00

..

auth

s4-auth-tests: Fix test_kerberos with MIT krb

2018-11-10 12:48:02 +01:00

build/pasn1

…

cldap_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

client

s4:client: Fix size types and loop

2018-04-03 20:20:10 +02:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

CVE-2018-14629 dns: CNAME loop prevention using counter

2018-11-28 08:22:23 +01:00

dsdb

replmd: remove unnecessary indent

2018-11-23 08:10:41 +01:00

echo_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

heimdal

PY3: fix "TabError: inconsistent use of tabs and spaces"

2018-09-27 01:54:27 +02:00

heimdal_build

s4:heimdal_build: make use of libreplace getprogname() replacement

2018-11-20 01:33:33 +01:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

CVE-2018-16841 heimdal: Fix segfault on PKINIT with mis-matching principal

2018-11-28 08:22:23 +01:00

ldap_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

lib

source4 messaging: clean up terminated processes

2018-11-23 08:25:20 +01:00

libcli

s4:libcli/smb2: reapply request endtime

2018-11-02 21:21:13 +01:00

libnet

libnet: Reset debug counters after replicating critical objects

2018-11-06 03:39:11 +01:00

librpc

s4:librpc: Use discard_const_p for ndr/py_misc

2018-11-14 08:45:19 +01:00

nbt_server

nbt_server: Use dom_sid_str_buf

2018-11-02 21:21:14 +01:00

ntp_signd

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

ntvfs

s4:libcli: allow passing an already negotiated connection to smb_composite_connect()

2018-07-24 06:55:23 +02:00

param

debug: Use debuglevel_(get|set) function

2018-11-08 11:03:11 +01:00

rpc_server

dns: prevent self-referencing CNAME

2018-11-28 08:22:23 +01:00

script

s4/script/depfilter.py: use py3 compatible regex import

2018-11-01 05:08:10 +01:00

scripting

s4/scripting/bin: gensec_client.update needs bytes

2018-11-14 05:07:17 +01:00

selftest

tests: Run backup tests against restoredc (SMBv1 disabled)

2018-11-27 03:43:17 +01:00

setup

s4:dsdb: add DSDB_CONTROL_DBCHECK_FIX_LINK_DN_SID oid

2018-10-30 07:30:20 +01:00

smb_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

smbd

source4 smbd prefork: Add code comments

2018-11-23 11:40:49 +01:00

torture

s3:selftest: add a VSS test reading a stream

2018-11-27 07:13:13 +01:00

utils

tests/demote: replace demote test bash script to python

2018-06-07 04:21:17 +02:00

web_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

winbind

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

wrepl_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

Do not install smbclient4 and nmblookup4

2014-04-15 03:25:13 +02:00