The Samba-Bugzilla – Attachment 14206 Details for
Bug 13374
[SECURITY] CVE-2018-1140 ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
patch also sent with the original report
0001-PATCH-Add-testing-for-ldbsearch-with-invalid-disting.patch (text/plain), 1.35 KB, created by
Andrew Bartlett
on 2018-05-20 23:24:57 UTC
(
hide
)
Description:
patch also sent with the original report
Filename:
MIME Type:
Creator:
Andrew Bartlett
Created:
2018-05-20 23:24:57 UTC
Size:
1.35 KB
patch
obsolete
>From 1d3a6f4e9ceae0f26229db443e3b2cb8a7c21ba3 Mon Sep 17 00:00:00 2001 >From: Andrej Gessel <Andrej.Gessel@janztec.com> >Date: Fri, 6 Apr 2018 18:14:45 +0200 >Subject: [PATCH 1/2] [PATCH] Add testing for ldbsearch with invalid > distinguishedName > >ldbsearch 'distinguishedName=abc' cause SIGSEGV > >Signed-off-by: Andrej Gessel <Andrej.Gessel@janztec.com> >--- > lib/ldb/tests/test-generic.sh | 1 + > selftest/knownfail.d/ldb.base | 1 + > 2 files changed, 2 insertions(+) > create mode 100644 selftest/knownfail.d/ldb.base > >diff --git a/lib/ldb/tests/test-generic.sh b/lib/ldb/tests/test-generic.sh >index 8177da5..2f1ddc4 100755 >--- a/lib/ldb/tests/test-generic.sh >+++ b/lib/ldb/tests/test-generic.sh >@@ -87,6 +87,7 @@ $VALGRIND ldbsearch '(&(uid=uham)(title=foo\blah))' uid && exit 1 > $VALGRIND ldbsearch '((' uid || exit 1 > $VALGRIND ldbsearch '(objectclass=)' uid || exit 1 > $VALGRIND ldbsearch -b 'cn=Hampster Ursula,ou=Alumni Association,ou=People,o=University of Michigan,c=TEST' -s base "" sn || exit 1 >+$VALGRIND ldbsearch 'distinguishedName=abc' uid || exit 1 > > echo "Test wildcard match" > $VALGRIND ldbadd $LDBDIR/tests/test-wildcard.ldif || exit 1 >diff --git a/selftest/knownfail.d/ldb.base b/selftest/knownfail.d/ldb.base >new file mode 100644 >index 0000000..6018160 >--- /dev/null >+++ b/selftest/knownfail.d/ldb.base >@@ -0,0 +1 @@ >+^ldb.base >\ No newline at end of file >-- >2.7.4 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 13374
:
14113
| 14206 |
14207
|
14208
|
14267
|
14270
|
14271
|
14272
|
14273
|
14274
|
14275
|
14276
|
14278
|
14279
|
14282
|
14283
|
14289
|
14290
|
14295
|
14296
|
14297
|
14316
|
14317
|
14418
|
14419