sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-10 01:18:15 +03:00
Code
fdcdfceefd
samba-mirror/source4
History
Gary Lockyer 4e624478dc s4 auth ntlm: Fix integer overflow in authsam_password_check_and_record 
Fix a ubsan detected integer overflow.
../../source4/auth/ntlm/auth_sam.c:445:56: runtime error:
     signed integer overflow: 60 * 600000000
     cannot be represented in type 'int'

In practice this meant that the default for the smb.conf parameter
"old password allowed period" was approximately 16 seconds, rather than
the intended 60 minutes. Similarly the value used would be 22.5 times
less than the value specified in smd.conf.

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jan 13 23:52:38 UTC 2021 on sn-devel-184
2021-01-13 23:52:38 +00:00
..
auth s4 auth ntlm: Fix integer overflow in authsam_password_check_and_record 2021-01-13 23:52:38 +00:00
build/pasn1
cldap_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
client lib/util: remove extra safe_string.h file 2020-08-28 02:18:40 +00:00
cluster dbwrap: Remove calls to loadparm 2018-04-24 01:53:19 +02:00
dns_server dns_update.c: handle DNS_QTYPE_ALL 2020-12-19 18:20:30 +00:00
dsdb dsdb: Fix a typo 2021-01-08 20:31:33 +00:00
echo_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
heimdal Compile .l files (flex) with the waf rule at runtime 2020-08-07 03:23:44 +00:00
heimdal_build heimdal_build: silence warning: macro redefined 2020-11-10 06:53:42 +00:00
include lib: Remove global xfile.h includes 2016-11-20 06:23:19 +01:00
kdc s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
ldap_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
lib auth:creds: Rename CRED_USE_KERBEROS values 2020-11-03 15:25:37 +00:00
libcli smb: rename NTCREATEX_OPTIONS_PRIVATE_DENY_FCB to NTCREATEX_FLAG_DENY_FCB 2020-10-23 17:44:33 +00:00
libnet s4:libnet:py_net - free event context in dealloc fn 2020-11-06 04:58:31 +00:00
librpc Add py binding for dcerpc_transport_encrypted 2020-11-06 10:02:35 +00:00
nbt_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
ntp_signd s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
ntvfs s3/wscript: only check for F_SETLEASE being available at compile time 2020-12-07 19:02:33 +00:00
param s4:param: Add 'weak crypto' getter to pyparam 2020-10-29 14:19:36 +00:00
rpc_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
samba Happy New Year 2021! 2021-01-01 11:56:23 +00:00
script PY3: change shebang to python3 in source4/dsdb dir 2018-12-14 14:40:20 +01:00
scripting gpo: Apply Group Policy Sudo Rights from VGP 2020-12-19 08:11:50 +00:00
selftest selftest: add tests for smb notify, using the a special share 2020-12-17 13:59:38 +00:00
setup provision: Add support for BIND 9.16.x 2020-09-24 04:32:42 +00:00
smb_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
torture s4:torture/fruit: avoid sleep(10000000); if write_stream() fails 2021-01-08 20:31:33 +00:00
utils lib/util: remove extra safe_string.h file 2020-08-28 02:18:40 +00:00
winbind s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
wrepl_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
.clang_complete
.valgrind_suppressions
wscript_build