libcli/security: don't allow conditional ACE SIDs to have trailing bytes
commita016ce70684e5237764b2432fa182ba8b0af6b0b
authorDouglas Bagnall <douglas.bagnall@catalyst.net.nz>
Wed, 13 Dec 2023 02:39:33 +0000 (13 15:39 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 14 Dec 2023 03:31:37 +0000 (14 03:31 +0000)
treec4acbdfe8206682e3902b757edbc7f64954914ab
parente004a5a444f9760ff305154cb0c3f1fe1800e8af
libcli/security: don't allow conditional ACE SIDs to have trailing bytes

They should be tightly packed, allowing conditional ACEs to
round-trip.

Credit to OSS-Fuzz.

REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64197

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
libcli/security/conditional_ace.c