sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Code
cd7c57c85d
samba-mirror/source4
History
Noel Power cd7c57c85d s4:torture:raw: fix 'Invalid read of size 1 & Conditional jump or move' errors. 
smbtorture test raw.offline.offline generates the following valgrind trace(s).

==5130==    at 0x2223AF: loadfile_callback (offline.c:107)
==5130==    by 0x5AF73E6: loadfile_handler (loadfile.c:208)
==5130==    by 0x5ADFEE0: smbcli_request_done (clitransport.c:395)
==5130==    by 0xF676EEE: tevent_common_loop_timer_delay (in /usr/lib64/libtevent.so.0.9.26)
==5130==    by 0xF677EF9: ??? (in /usr/lib64/libtevent.so.0.9.26)
==5130==    by 0xF6765F6: ??? (in /usr/lib64/libtevent.so.0.9.26)
==5130==    by 0xF6727FC: _tevent_loop_once (in /usr/lib64/libtevent.so.0.9.26)
==5130==    by 0x223A16: torture_test_offline (offline.c:493)
==5130==    by 0x9553F62: wrap_simple_test (torture.c:632)
==5130==    by 0x955368F: internal_torture_run_test (torture.c:442)
==5130==    by 0x9553A6B: torture_run_test_restricted (torture.c:542)
==5130==    by 0x260121: run_matching (smbtorture.c:110)
==5130==    by 0x25FFE3: run_matching (smbtorture.c:95)
==5130==    by 0x260242: torture_run_named_tests (smbtorture.c:143)
==5130==    by 0x261EC1: main (smbtorture.c:665)
==5130==  Address 0x188b80d0 is 96 bytes inside a block of size 8,288 free'd
==5130==    at 0x4C2A37C: free (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==5130==    by 0xF4673A3: ??? (in /usr/lib64/libtalloc.so.2.1.5)
==5130==    by 0xF460E42: _talloc_free (in /usr/lib64/libtalloc.so.2.1.5)
==5130==    by 0x5AF7635: smb_composite_loadfile_recv (loadfile.c:278)
==5130==    by 0x2222F7: loadfile_callback (offline.c:91)
==5130==    by 0x5AF73E6: loadfile_handler (loadfile.c:208)
==5130==    by 0x5ADFEE0: smbcli_request_done (clitransport.c:395)
==5130==    by 0xF676EEE: tevent_common_loop_timer_delay (in /usr/lib64/libtevent.so.0.9.26)
==5130==    by 0xF677EF9: ??? (in /usr/lib64/libtevent.so.0.9.26)
==5130==    by 0xF6765F6: ??? (in /usr/lib64/libtevent.so.0.9.26)
==5130==    by 0xF6727FC: _tevent_loop_once (in /usr/lib64/libtevent.so.0.9.26)
==5130==    by 0x223A16: torture_test_offline (offline.c:493)
==5130==    by 0x9553F62: wrap_simple_test (torture.c:632)
==5130==    by 0x955368F: internal_torture_run_test (torture.c:442)
==5130==    by 0x9553A6B: torture_run_test_restricted (torture.c:542)
==5130==    by 0x260121: run_matching (smbtorture.c:110)
==5130==    by 0x25FFE3: run_matching (smbtorture.c:95)
==5130==    by 0x260242: torture_run_named_tests (smbtorture.c:143)
==5130==    by 0x261EC1: main (smbtorture.c:665)
==5130==

AND

==5428== Conditional jump or move depends on uninitialised value(s)
==5428==    at 0x22270E: getoffline_callback (offline.c:197)
==5428==    by 0x5ADFEE0: smbcli_request_done (clitransport.c:395)
==5428==    by 0xF676EEE: tevent_common_loop_timer_delay (in /usr/lib64/libtevent.so.0.9.26)
==5428==    by 0xF677EF9: ??? (in /usr/lib64/libtevent.so.0.9.26)
==5428==    by 0xF6765F6: ??? (in /usr/lib64/libtevent.so.0.9.26)
==5428==    by 0xF6727FC: _tevent_loop_once (in /usr/lib64/libtevent.so.0.9.26)
==5428==    by 0x223A1B: torture_test_offline (offline.c:494)
==5428==    by 0x9553F62: wrap_simple_test (torture.c:632)
==5428==    by 0x955368F: internal_torture_run_test (torture.c:442)
==5428==    by 0x9553A6B: torture_run_test_restricted (torture.c:542)
==5428==    by 0x260126: run_matching (smbtorture.c:110)
==5428==    by 0x25FFE8: run_matching (smbtorture.c:95)
==5428==    by 0x260247: torture_run_named_tests (smbtorture.c:143)
==5428==    by 0x261EC6: main (smbtorture.c:665)
==5428==

Signed-off-by: Noel Power <noel.power@suse.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2016-04-25 10:35:15 +02:00
..
auth CVE-2016-2110: libcli/auth: pass server_timestamp to SMBNTLMv2encrypt_hash() 2016-04-12 19:25:23 +02:00
build/pasn1
cldap_server Avoid including libds/common/roles.h in public loadparm.h header. 2016-01-13 04:43:23 +01:00
client s4/client/cifsdd.c: typo 2016-03-10 00:08:11 +01:00
cluster Remove callers of lp_use_ntdb 2015-03-17 11:30:51 +01:00
dns_server build: mark explicit dependencies on pytalloc-util 2016-03-15 07:08:16 +01:00
dsdb tests/passwords: fix a typo 2016-04-19 07:54:35 +02:00
echo_server Avoid including libds/common/roles.h in public loadparm.h header. 2016-01-13 04:43:23 +01:00
heimdal s4/heimdal: allow SPNs in AS-REQ 2016-04-25 10:35:14 +02:00
heimdal_build s4:heimdal_build: also use check_system_heimdal_lib() for "com_err" 2015-10-31 22:03:14 +01:00
include lib/util: Include DEBUG macro in internal header files before samba_util.h 2015-03-11 18:47:22 +01:00
kdc s4: add a minimal ktutil for selftest 2016-04-25 10:35:14 +02:00
ldap_server CVE-2016-2112: s4:ldap_server: implement "ldap server require strong auth" option 2016-04-12 19:25:25 +02:00
lib s4:lib:registry: fix 'Conditional jump or move' valgrind error. 2016-04-25 10:35:14 +02:00
libcli s4:libcli: fix 'Conditional jump or move' valgrind error 2016-04-25 10:35:15 +02:00
libnet s4:libnet: fix 'Syscall param writev(vector[...])' valgrind error 2016-04-25 10:35:14 +02:00
librpc CVE-2015-5370: s4:librpc/rpc: call dcerpc_connection_dead() on protocol errors 2016-04-12 19:25:32 +02:00
nbt_server dlist: remove unneeded type argument from DLIST_ADD_END() 2016-02-06 21:48:17 +01:00
ntp_signd build: Build with system md5.h on OpenIndiana 2013-06-19 21:32:36 +02:00
ntptr spoolss: make spoolss deal with ndr64 SetForm by using proper container object. 2013-01-17 17:11:37 +01:00
ntvfs configure: Don't check for inotify on illumos 2016-04-06 00:15:17 +02:00
param CVE-2016-2115: s4:libcli/raw: add smbcli_options.min_protocol 2016-04-12 19:25:26 +02:00
rpc_server CVE-2015-5370: s4:rpc_server: reject DCERPC_PFC_FLAG_PENDING_CANCEL with DCERPC_FAULT_NO_CALL_ACTIVE 2016-04-12 19:25:31 +02:00
script find_unused_macros: Remove obsolete script that finds unused macros. 2014-08-31 21:21:13 +02:00
scripting s4:scripting/devel: make use of the generic arcfour_encrypt() and string_to_byte_array() functions 2016-02-03 08:33:11 +01:00
selftest CVE-2015-5370: s4:selftest: run samba.tests.dcerpc.raw_protocol against ad_dc 2016-04-12 19:25:33 +02:00
setup build:wafsamba: Install named.conf only once 2015-11-16 11:48:14 +01:00
smb_server CVE-2016-2115: s3:libsmb: add signing constant SMB_SIGNING_IPC_DEFAULT 2016-04-12 19:25:26 +02:00
smbd dlist: remove unneeded type argument from DLIST_ADD_END() 2016-02-06 21:48:17 +01:00
torture s4:torture:raw: fix 'Invalid read of size 1 & Conditional jump or move' errors. 2016-04-25 10:35:15 +02:00
utils Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth 2016-03-11 22:58:18 +01:00
web_server python: Remove Python 2.4 support macros 2016-01-07 23:33:10 +01:00
winbind s4-winbindd: Remove the winbind rewrite from the samba4 effort 2015-06-24 22:34:57 +02:00
wrepl_server dlist: remove unneeded type argument from DLIST_ADD_END() 2016-02-06 21:48:17 +01:00
.clang_complete
.valgrind_suppressions
wscript_build Do not install smbclient4 and nmblookup4 2014-04-15 03:25:13 +02:00