CVE-2021-44141: s3: smbd: Inside check_reduced_name() ensure we return the correct...
commit66774e97e200d686be9c54739dc67ff0ed56af6f
authorJeremy Allison <jra@samba.org>
Tue, 7 Dec 2021 22:33:17 +0000 (7 14:33 -0800)
committerJule Anger <janger@samba.org>
Mon, 31 Jan 2022 11:23:53 +0000 (31 12:23 +0100)
tree4f774ef0fd19920af6ffe583ddaaac7acbb50d9d
parentb97f4a6519f64cbcea2b6baa33d853faf4bc24cb
CVE-2021-44141: s3: smbd: Inside check_reduced_name() ensure we return the correct error codes when failing symlinks.

NT_STATUS_OBJECT_PATH_NOT_FOUND for a path component failure.
NT_STATUS_OBJECT_NAME_NOT_FOUND for a terminal component failure.

Remove:

samba3.blackbox.test_symlink_traversal.SMB1.posix
samba3.blackbox.smbclient_s3.*.Ensure\ widelinks\ are\ restricted\(.*\)
samba3.blackbox.smbclient_s3.*.follow\ symlinks\ \=\ no\(.*\)

in knownfail.d/symlink_traversal as we now pass these. Only one more fix
remaining to get rid of knownfail.d/symlink_traversal completely.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14911

Signed-off-by: Jeremy Allison <jra@samba.org>
selftest/knownfail.d/symlink_traversal
source3/smbd/vfs.c