| commit | 5e7e402320ebce06957e85f35d478615b2210a87 | |
| author | Jeremy Allison <jra@samba.org> | |
| Sun, 26 Sep 2010 11:59:31 +0000 (26 04:59 -0700) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Thu, 7 Oct 2010 15:43:58 +0000 (7 17:43 +0200) | ||
| tree | c410b475de7552fefc52a2e67ffebb0abc9cceaf | treesnapshot (tar.gz zip) |
| parent | b19f866f2285da5ecc3982b2c9c0ccd005dd41cc | commitdiff |
Fix bug 7694 - Crash bug with invalid SPNEGO token.
Found by the CodeNomicon test suites at the SNIA plugfest.
http://www.codenomicon.com/
If an invalid SPNEGO packet contains no OIDs we crash in the SMB1/SMB2 server
as we indirect the first returned value OIDs[0], which is returned as NULL.
Modified for 3.5.x.
Jeremy.
Found by the CodeNomicon test suites at the SNIA plugfest.
http://www.codenomicon.com/
If an invalid SPNEGO packet contains no OIDs we crash in the SMB1/SMB2 server
as we indirect the first returned value OIDs[0], which is returned as NULL.
Modified for 3.5.x.
Jeremy.
| source3/libads/sasl.c | diffblobblamehistory | |
| source3/libsmb/cliconnect.c | diffblobblamehistory | |
| source3/rpc_server/srv_pipe.c | diffblobblamehistory | |
| source3/smbd/sesssetup.c | diffblobblamehistory |