| commit | 5650b511c1fb98106942ca2829bd4fcfdae4eca1 | |
| author | Douglas Bagnall <douglas.bagnall@catalyst.net.nz> | |
| Fri, 22 Sep 2023 00:53:42 +0000 (22 12:53 +1200) | ||
| committer | Andrew Bartlett <abartlet@samba.org> | |
| Tue, 26 Sep 2023 23:45:36 +0000 (26 23:45 +0000) | ||
| tree | dcca6ae50004593b2bc759b3d9f17a4bb0a3aafa | treesnapshot (tar.gz zip) |
| parent | b3f92b475c31bd2a4423c7531c62cc621bb102e6 | commitdiff |
libcli/security/sddl_conditional_ace: ban empty expressions in SDDL
The trouble is with expressions like "(!(()))", which boil down to a
single NOT operation with no argument, which is invalid and can't be
run or expressed as SDDL.
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
The trouble is with expressions like "(!(()))", which boil down to a
single NOT operation with no argument, which is invalid and can't be
run or expressed as SDDL.
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>