| commit | 7d1db0a35bd8e835147c5dce3bcb0444ccc12dd6 | |
| author | Jeremy Allison <jra@samba.org> | |
| Sun, 26 Sep 2010 11:59:31 +0000 (26 04:59 -0700) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Thu, 7 Oct 2010 16:40:58 +0000 (7 18:40 +0200) | ||
| tree | cae6fc5780838e01e6c706d3d1e1d7f18499a25f | treesnapshot (tar.gz zip) |
| parent | 63489730737e36580a98e7c5c6c94f11b615f5e4 | commitdiff |
Fix bug 7694 - Crash bug with invalid SPNEGO token.
Found by the CodeNomicon test suites at the SNIA plugfest.
http://www.codenomicon.com/
If an invalid SPNEGO packet contains no OIDs we crash in the SMB1/SMB2 server
as we indirect the first returned value OIDs[0], which is returned as NULL.
Modified for 3.5.x.
Jeremy.
(cherry picked from commit 5e7e402320ebce06957e85f35d478615b2210a87)
Found by the CodeNomicon test suites at the SNIA plugfest.
http://www.codenomicon.com/
If an invalid SPNEGO packet contains no OIDs we crash in the SMB1/SMB2 server
as we indirect the first returned value OIDs[0], which is returned as NULL.
Modified for 3.5.x.
Jeremy.
(cherry picked from commit 5e7e402320ebce06957e85f35d478615b2210a87)
| source3/libads/sasl.c | diffblobblamehistory | |
| source3/libsmb/cliconnect.c | diffblobblamehistory | |
| source3/rpc_server/srv_pipe.c | diffblobblamehistory | |
| source3/smbd/sesssetup.c | diffblobblamehistory |