| commit | be9945a4d8e774e8255dd9ae0ed29c9a953ce3ff | |
| author | Joseph Sutton <josephsutton@catalyst.net.nz> | |
| Fri, 10 Jun 2022 07:18:07 +0000 (10 19:18 +1200) | ||
| committer | Jule Anger <janger@samba.org> | |
| Sun, 24 Jul 2022 09:55:51 +0000 (24 11:55 +0200) | ||
| tree | a89927585d648c549f0763ca555d0279bf13b1fc | treesnapshot (tar.gz zip) |
| parent | 22bd1bc2d7308167ea316c6b48f130d378ab4c8b | commitdiff |
CVE-2022-2031 auth: Add ticket type field to auth_user_info_dc and auth_session_info
This field may be used to convey whether we were provided with a TGT or
a non-TGT. We ensure both structures are zeroed out to avoid incorrect
results being produced by an uninitialised field.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>
This field may be used to convey whether we were provided with a TGT or
a non-TGT. We ensure both structures are zeroed out to avoid incorrect
results being produced by an uninitialised field.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>