mirror of
https://github.com/samba-team/samba.git
synced 2025-01-08 21:18:16 +03:00
d6f010090c
We burn arguments to all unknown options containing "pass" (e.g.
"--passionate=false") in case they are a password option, but is bad
in the case where the unknown option takes no argument but the next
option *is* a password (like "--overpass --password2 barney". In that
case "--password2" would be burnt and not "barney".
The burning behaviour doesn't change with this commit, but users will now
see an error message explaining that the option was unknown. This is not
so much aimed at end users -- for who an invalid option will hopefully
lead to --help like output -- but to developers who add a new "pass"
option.
This also slightly speeds up the processing of known password options,
which is a little bit important because we are in a race to replace the
command line in /proc before an attacker sees it.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15674
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>
Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org>
Autobuild-Date(master): Wed Jul 10 06:28:08 UTC 2024 on atb-devel-224
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| addns | ||
| afs | ||
| async_req | ||
| audit_logging | ||
| cmdline | ||
| compression | ||
| crypto | ||
| dbwrap | ||
| fuzzing | ||
| krb5_wrap | ||
| ldb | ||
| ldb-samba | ||
| messaging | ||
| mscat | ||
| param | ||
| printer_driver | ||
| pthreadpool | ||
| replace | ||
| smbconf | ||
| socket | ||
| talloc | ||
| tdb | ||
| tdb_wrap | ||
| tdr | ||
| tevent | ||
| texpect | ||
| torture | ||
| tsocket | ||
| util | ||
| README | ||
| wscript_build | ||
compression - Various compression algorithms (MSZIP, lzxpress)
popt - Command-line option parsing library
replace - Provides replacements for standard (POSIX, C99) functions
not provided by the host platform.
subunit - Utilities and bindings for working with the Subunit test result
reporting protocol.
talloc - Hierarchical pool based memory allocator
tdb - Simple but fast key/value database library, supporting multiple writers
torture - Simple unit testing helper library