| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
(The test needs to additionally include <netinet/in_systm.h>.)
Michael
(cherry picked from commit 1868bfd40f7bf4caf9a31116111fa3a5169f4735)
|
|
|
|
|
|
|
| |
under solaris
Michael
(cherry picked from commit d09c9b459638242b9df53cc82a8849699d572486)
|
|
|
|
|
| |
Jeremy.
(cherry picked from commit 974262ba3e8226ec9805d38e602ec8d083e44f72)
|
|
|
|
|
| |
Signed-off-by: Bo Yang <boyang@novell.com>
(cherry picked from commit 514dfc632ed35a80a175a4afbe9607aa4d913da3)
|
|
|
|
|
| |
krb5 refresh chain fixes.
(cherry picked from commit 194425f8074e2cfd5893499099614666f8d8ecd9)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
<realrichardsharpe@gmail.com>.
"It seems to me that if the lock is already held by another process when we
enter this code, there is a race between the timeout and the granting. If
the lock is subsequently granted, the process releasing the lock will signal
the wait variable (or whatever) and our process will be scheduled. However,
if the timeout occurs before we are scheduled, the timeout will be delivered
first.
We will have the lock but will forget we have the lock, and never release
it."
Jeremy.
(cherry picked from commit 8904b83ce6c69db31dc2ce4c05e8e8ee3db5ec3b)
|
|
|
|
|
| |
Signed-off-by: Andreas Schneider <anschneider@suse.de>
(cherry picked from commit 26e82e3e006a80c9d4d1cb437eb39b02efa7c3ad)
|
|
|
|
|
| |
Reported by Ted Percival <ted@midg3t.net>.
Jeremy.
|
|
|
|
|
| |
We did not allocate enough memory for the \0 and a = at the end.
Jeremy.
|
|
|
|
|
|
| |
strlcat gives error.
Jeremy.
|
|
|
|
|
|
|
| |
timespec.
Fix from hkurma@datadomain.com.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
-- Summary --
Specifically crafted SMB responses can result
in a heap overflow in the Samba client code.
Because the server process, smbd, can itself
act as a client during operations such as
printer notification and domain authentication,
this issue affects both Samba client and server
installations.
Ensure that we specify the buffer size used to store incoming SMB
packets. This bug was originally introduced in Samba 2.2.4. Patch from
Jeremy Allison.
|
|
|
|
|
|
|
|
|
| |
Can someone with gpfs available test this ? The only codepath using this
function is the modules/gpfs.c module. The fix resolves at least the build
issues Samba has with recent kernel / libcap versions by using the portable
cap_get_proc()/cap_set_proc() interface (instead of using capget/capset).
Guenther
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
|
|
|
|
| |
util_tdb: fix a segfault caused by a fatal typo.
In tdb_wrap_log(), in on occurrence of "debug_level = 0"
instead of "debuglevel = 0" caused me segfaults when
accessing DEBUGLEVEL (which is defined as "*debug_level"...)
Michael
|
|
|
|
| |
Karolin
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
|
|
| |
Use the resulting HAVE_LBER_LOG_PRINT_FN to determine whether we can
use it in init_ldap_debugging to intercept LDAP debug output and print
it out in the samba logs (controlled with "ldap debug level").
Michael
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Logging of the ldap libraries appears with a [LDAP] prefix
inside the samba logs. This is controlled by two new parameters:
* "ldap debug level" sets the debug level of the ldap libraries.
It is the bit-field as understood by the openldap server.
* "ldap debug threshold" is the samba debug level at which ldap
logging appears inside the samba logs.
This probably needs some configure tests since it makes
use of the LBER_OPT_LOG_PRINT_FN option to redirect the
debug output of the ldap libraries.
Michael
|
|
|
|
|
|
|
| |
bytes and null terminates them to ensure NDR wire-reads
of string types are always null terminated. Bug found by
Volker after great pain :-).
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
There are several callers in 3.0 that don't give a pstring to string_replace,
thus it will end up in segfaults like the one reported by Sergio Pires
<suporte@grupovdl.com.br> on samba@samba.org. The 3.2 version of string_replace
does not have the pstring assumption anymore.
Jeremy, Jerry, please check!
Thanks,
Volker
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
system).
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
Already fixed in 3.2 code.
Jeremy.
|
|
|
|
|
|
|
| |
Republic <Jiri.Sasek@Sun.COM>
to allow Solaris to get passwords > 8 chars.
Jeremy.
|
| |
|
|
|
|
|
|
| |
Ensure that is zero termination is requested that it is
applied if there's space.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
== Subject: Stack buffer overflow in nmbd's logon
== request processing.
==
== CVE ID#: CVE-2007-4572
==
== Versions: Samba 3.0.0 - 3.0.26a (inclusive)
...
Samba developers have discovered what is believed to be
a non-exploitable buffer over in nmbd during the processing
of GETDC logon server requests. This code is only used
when the Samba server is configured as a Primary or Backup
Domain Controller.
|
|
|
|
|
|
|
|
| |
an alarm sig would not terminate and could lead
to runaway smbd processes.
Thanks to Dave Daugherty @ Centrify for pointing
this out to us.
Jeremy.
|
|
|
|
|
| |
Jeremy.
(cherry picked from commit 406737cd9a34ac498e5823b380e1768d41e16c1b)
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
to the caller (winbindd_validate_cache in this case).
Next, there will be a backup handling for the tdb files.
Michael
|
| |
|
|
|
|
| |
Michael
|
|
|
|
|
|
| |
checkin will pull this up to srvstr_get_path. At that point we can get more
independent of the inbuf, the base_ptr in pull_string will only be used
to satisfy UCS2 alignment constraints.
|
|
|
|
| |
Jeremy.
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
one byte of data despite characters being two-byte.
This modifies registry_pull_value, to change the data
to the correct two-byte version of the empty string,
(as delivered by winxp), when only one byte of data is
received.
Michael
|
| |
|
| |
|
|
|
|
| |
all, so it's gone. With it 8k bss went away.
|
| |
|
|
|
|
|
| |
This one was particularly tasty, it was a static one. So 1k less
footprint per process.
|
|
|
|
|
|
|
| |
(This will be used in a next step to prevent storing these
values in reg_smbconf.c.)
Michael
|
|
|
|
| |
Michael
|
|
|
|
|
|
|
|
| |
back to winbindd_cache.c. The generic mechanism
should open the cache tdb readonly and with default
flags.
Michael
|