1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-05 09:18:06 +03:00
samba-mirror/auth/gensec
Gary Lockyer f467727db5 CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth
Add maximum parse tree depth to the call to asn1_init, which will be
used to limit the depth of the ASN.1 parse tree.

Credit to OSS-Fuzz

REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2020-05-04 02:59:31 +00:00
..
external.c define DBGC_AUTH class 2018-01-08 03:34:17 +01:00
gensec_internal.h gensec: Add a check if a gensec module implements weak crypto 2020-03-19 20:46:41 +00:00
gensec_start.c gensec: Add a check if a gensec module implements weak crypto 2020-03-19 20:46:41 +00:00
gensec_util.c CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth 2020-05-04 02:59:31 +00:00
gensec.c auth/gensec: map NT_STATUS_{INVALID_ACCOUNT_NAME,NO_SUCH_DOMAIN} to NT_STATUS_NO_SUCH_USER 2020-02-10 16:32:37 +00:00
gensec.h auth/gensec: finally remove unused gensec_update_ev() 2017-07-25 17:42:55 +02:00
ncalrpc.c define DBGC_AUTH class 2018-01-08 03:34:17 +01:00
schannel.c auth/gensec: fix AES schannel seal and unseal 2019-10-07 08:13:44 +00:00
spnego.c gensec/spnego: fallback on INVALID_{ACCOUNT,COMPUTER}_NAME and NO_SUCH_DOMAIN 2020-02-10 16:32:37 +00:00
wscript_build lib/crypto: move gnutls error wrapper to own subsystem 2019-06-27 12:54:22 +00:00