Joseph Sutton 704c71daf5 libcli/security: Initialize conditional ACE token ...

If the ‘flags’ member is not initialized, we invoke undefined behaviour
when trying to push or evaluate the parsed conditional ACE.

One way this issue can manifest is in the mysterious failure of Unicode
comparisons owing to the CLAIM_SECURITY_ATTRIBUTE_VALUE_CASE_SENSITIVE
flag being set when it shouldn’t.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2023-10-12 23:13:32 +00:00

..

tests

libcli/security: test_run_condtional_ace: va_end() on errors

2023-09-29 02:18:34 +00:00

access_check.c

libcli:security: Use SELF SID constant

2023-09-27 02:43:28 +00:00

access_check.h

CVE-2023-0614 libcli/security: Make some parameters const

2023-04-05 02:10:34 +00:00

claims-conversions.c

libcli/security: Add function to convert token claims to security attribute claims

2023-09-27 02:43:28 +00:00

claims-conversions.h

libcli/security: Add function to convert token claims to security attribute claims

2023-09-27 02:43:28 +00:00

conditional_ace.c

libcli/security: Initialize conditional ACE token

2023-10-12 23:13:32 +00:00

conditional_ace.h

libcli/security: Parenthesize macro parameter

2023-10-01 22:45:38 +00:00

create_descriptor.c

lbcli/security: callback object ACES fall back with no GUID

2023-09-26 23:45:35 +00:00

display_sec.c

libcli:sec:display: use macro for more ace types

2023-09-07 04:53:41 +00:00

display_sec.h

libcli/security: move display_sec headers to own header file and add to

2011-03-16 10:11:08 +01:00

dom_sid.c

libcli:security: Prefer explicit initialization to ZERO_STRUCTP()

2023-09-14 21:35:29 +00:00

dom_sid.h

libcli:security: Add Compounded Authentication and Claims Valid SID constants

2023-09-27 02:43:28 +00:00

object_tree.c

libcli:security: Fix code spelling

2023-04-27 14:25:38 +00:00

privileges_private.h

libcli/security Move 'private' privileges functions to another header

2010-09-11 18:46:13 +10:00

privileges.c

libcli: Convert security_token_debug_privileges() to talloc_asprintf

2023-10-10 23:23:40 +00:00

privileges.h

libcli: Convert security_token_debug_privileges() to talloc_asprintf

2023-10-10 23:23:40 +00:00

pysecurity.c

libcli/security/pysecurity: use NULL to mean NULL in C

2023-08-24 02:53:30 +00:00

sddl_conditional_ace.c

libcli/security: Refer to UTF‐16 code units rather than to codepoints

2023-09-27 02:43:28 +00:00

sddl.c

libcli/security: SDDL: add callback and resource ace type flags

2023-09-26 23:45:35 +00:00

sddl.h

libcli/security: make sddl_encode_sid an external function

2023-09-07 04:53:41 +00:00

secace.c

libcli/security: Remove unused macro

2023-09-27 02:43:28 +00:00

secace.h

libcli/security: helper to find ACEs with meaningful codas

2023-09-26 23:45:35 +00:00

secacl.c

libcli/security: Avoid includes.h

2023-03-09 18:10:33 +00:00

secacl.h

libcli: make_sec_acl() copies the ace_list, make that const

2021-01-22 19:54:38 +00:00

secdesc.c

lib: Remove a talloc_stackframe()

2023-03-09 18:10:33 +00:00

secdesc.h

libcli/security: Remove unused dup_sec_desc_buf()

2019-05-22 05:59:14 +00:00

security_descriptor.c

libcli/security: Handle new ACE types with sec_ace_object()

2023-10-01 22:45:38 +00:00

security_descriptor.h

libcli/security: add security_descriptor_[s|d]acl_insert() helpers

2023-03-22 15:01:32 +00:00

security_token.c

libcli: Make security_token_debug() use just one DEBUG statement

2023-10-10 23:23:40 +00:00

security_token.h

libcli/security: Rename dup_nt_token() -> security_token_duplicate()

2023-09-26 23:45:36 +00:00

security.h

libcli:security: Fix code spelling

2023-04-27 14:25:38 +00:00

session.c

libcli/security: Avoid includes.h

2023-03-09 18:10:33 +00:00

session.h

libcli/security: implement SECURITY_GUEST

2016-04-28 16:51:17 +02:00

util_sid.c

libcli:security: Add Compounded Authentication and Claims Valid SID constants

2023-09-27 02:43:28 +00:00

wscript_build

conditional_aces: Avoid manual parsing for ace_condition_sid

2023-09-26 23:45:36 +00:00