Gary Lockyer b0832d2016 CVE-2020-10704: libcli ldap: test recursion depth in ldap_decode_filter_tree ... Add tests to check that ASN.1 ldap requests with deeply nested elements are rejected. Previously there was no check on the on the depth of nesting and excessive nesting could cause a stack overflow. Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>		2020-05-04 02:59:32 +00:00
..
tests	CVE-2020-10704: libcli ldap: test recursion depth in ldap_decode_filter_tree	2020-05-04 02:59:32 +00:00
ldap_errors.h
ldap_message.c	CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth	2020-05-04 02:59:31 +00:00
ldap_message.h	samba: pass down size_t instead of int to add_string_to_array().	2014-11-17 19:53:22 +01:00
ldap_ndr.c	typo: mplementation => implementation	2016-05-06 05:03:16 +02:00
ldap_ndr.h	typo: mplementation => implementation	2016-05-06 05:03:16 +02:00
wscript_build	CVE-2020-10704: libcli ldap: test recursion depth in ldap_decode_filter_tree	2020-05-04 02:59:32 +00:00