Douglas Bagnall f36cb71c33 CVE-2015-5330: ldb_dn_explode: copy strings by length, not terminators ...

That is, memdup(), not strdup(). The terminators might not be there.

But, we have to make sure we put the terminator on, because we tend to
assume the terminator is there in other places.

Use talloc_set_name_const() on the resulting chunk so talloc_report()
remains unchanged.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11599

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Pair-programmed-with: Andrew Bartlett <abartlet@samba.org>
Pair-programmed-with: Garming Sam <garming@catalyst.net.nz>
Pair-programmed-with: Stefan Metzmacher <metze@samba.org>
Pair-programmed-with: Ralph Boehme <slow@samba.org>

2015-12-09 17:19:53 +01:00

..

ABI

ldb: version 1.1.23

2015-11-05 21:11:35 +01:00

common

CVE-2015-5330: ldb_dn_explode: copy strings by length, not terminators

2015-12-09 17:19:53 +01:00

docs

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

examples

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

include

ldb: Move ldb_(un)pack_data into ldb_module.h for testing

2015-12-04 06:08:29 +01:00

ldb_ldap

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

ldb_map

Fix the O3 developer build

2015-03-03 13:14:53 +01:00

ldb_sqlite3

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

ldb_tdb

Fix propagation of LDB errors through TDB.

2015-12-04 06:08:29 +01:00

man

Fix typo in ldbrename manpage

2014-08-28 01:57:13 +02:00

modules

ldb: Fix CID 240798 Uninitialized pointer read

2013-10-22 03:28:20 +02:00

nssldb

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

tests

ldb: Fix bug triggered by having an empty message in database during search.

2015-12-04 06:08:29 +01:00

tools

ldb: Fix CID 1034793 Dereference null return value

2013-08-19 11:08:23 +12:00

web

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

_ldb_text.py

pyldb: Split text/byte strings for compatibility with Python 3

2015-11-05 18:04:24 +01:00

configure

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

Doxyfile

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

examples.dox

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

ldb.pc.in

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

mainpage.dox

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

Makefile

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

pyldb_util.c

pyldb: Split text/byte strings for compatibility with Python 3

2015-11-05 18:04:24 +01:00

pyldb-util.pc.in

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

pyldb.c

pyldb: Improve test coverage

2015-11-05 18:04:24 +01:00

pyldb.h

pyldb: Consistently use pyldb_ prefix.

2011-08-07 17:08:56 +02:00

README_gcov.txt

ldb: make ldb a top level library for Samba 4.0

2011-07-05 17:24:47 +10:00

wscript

ldb: Fix installation of _ldb_text.py

2015-12-04 06:08:29 +01:00