samba.git/lib, branch v3-5-test

lib/replace: replace all *printf function if we replace snprintf (bug #9390)

2012-11-15T11:00:34+00:00

This fixes segfaults in log level = 10 on Solaris.

Signed-off-by: Stefan Metzmacher 
Signed-off-by: Björn Jacke 

Autobuild-User(master): Björn Jacke 
Autobuild-Date(master): Wed Nov 14 19:41:14 CET 2012 on sn-devel-104
(cherry picked from commit a15da3625850d97b3da1b02308c870f820007c52)

The last 5 patches address bug #9390 - Solaris printf doesn't allow %s, NULL.

libreplace: Fix symbol names for snprintf/asprintf/vasprintf.

2012-11-15T11:00:20+00:00

Autobuild-User: Jelmer Vernooij 
Autobuild-Date: Sun May 13 05:16:28 CEST 2012 on sn-devel-104
(cherry picked from commit cf67da70c9a63c4dc63f287059321d6c36d1e19e)

libreplace: fixed declaration of dprintf() on FreeBSD (cherry picked from commit a599319d0a389ff0c31dae8068cd7a78352aa9e7)

2012-11-15T11:00:20+00:00

libreplace: added replacements for dprintf() and vdprintf()

2012-11-15T11:00:20+00:00

these are very useful for writing files with formatted writes

Pair-Programmed-With: Andrew Bartlett 
(cherry picked from commit d6fb64c51244529388b1f79ba8220ff608e1e4de)

libreplace: some systems don't have memmem()

2012-11-15T11:00:20+00:00

added rep_memmem() and a testsuite
(cherry picked from commit fef3c910da421e890925e5e61275fc457da87f6e)

Fix bug 7462 - Non-standard SA_RESETHAND is used in ...lib/tevent/tevent_sig

2011-08-02T18:49:46+00:00

Make SA_RESETHAND conditional on its existance.

Autobuild-User: Jeremy Allison 
Autobuild-Date: Mon Aug  1 22:03:45 CEST 2011 on sn-devel-104
(cherry picked from commit 0c67efdd68b9808542c090b9fd9920e4e37d85d0)

libreplace: include sys/file.h only when available

2011-06-17T19:01:19+00:00

thanks to Joachim Schmitz . This fixes #7460.

Fix our asn.1 parser to handle negative numbers.

2011-05-26T18:21:38+00:00

Autobuild-User: Jeremy Allison 
Autobuild-Date: Tue May 24 22:57:16 CEST 2011 on sn-devel-104
(cherry picked from commit e719dfd4dc178f001a5f804fb1ac4e587574415f)

Fix bug #8163 (asn.1 library does not correctly read negative integers).
(cherry picked from commit 859d13141cd831488b60e413f7141514ae4464b5)

tdb_expand: limit the expansion with huge records

2011-05-18T18:28:55+00:00

ldb can create huge records when saving indexes.
Limit the tdb expansion to avoid consuming a lot of memory for
no good reason if the record being saved is huge.

Fix bug #7610 (winbindd_cache.tdb grows too large when scaled).

Fix denial of service - memory corruption.

2011-02-28T13:43:59+00:00

CVE-2011-0719

Fix bug #7949 (DoS in Winbind and smbd with many file descriptors open).

All current released versions of Samba are vulnerable to
a denial of service caused by memory corruption. Range
checks on file descriptors being used in the FD_SET macro
were not present allowing stack corruption. This can cause
the Samba code to crash or to loop attempting to select
on a bad file descriptor set.

A connection to a file share, or a local account is needed
to exploit this problem, either authenticated or unauthenticated
(guest connection).

Currently we do not believe this flaw is exploitable
beyond a crash or causing the code to loop, but on the
advice of our security reviewers we are releasing fixes
in case an exploit is discovered at a later date.
(cherry picked from commit c3ad6eb506623435d3d9ce62d6f34ed1c960d4be)