samba.git/source4/ldap_server, branch talloc-2.2.0

CVE-2018-16851 ldap_server: Check ret before manipulating blob

2018-11-28T07:22:24+00:00

In the case of hitting the talloc ~256MB limit, this causes a crash in
the server.

Note that you would actually need to load >256MB of data into the LDAP.
Although there is some generated/hidden data which would help you reach that
limit (descriptors and RMD blobs).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13674

Signed-off-by: Garming Sam 
Reviewed-by: Andrew Bartlett

source4 smdb: Add a post fork hook to the service API

2018-11-01T22:49:24+00:00

Add a post fork hook to the service API this will be called:

 - standard process model
   immediately after the task_init.

- single process model
  immediately after the task_init

- prefork process model, inhibit_pre_fork = true
  immediately after the task_init

- prefork process model, inhibit_pre_fork = false
  after each service worker has forked. It is not run on the service
  master process.

The post fork hook is not called in the standard model if a new process
is forked on a new connection. It is instead called immediately after
the task_init.

The task_init hook has been changed to return an error code. This ensures
the post_fork code is only run if the task_init code completed successfully.

Signed-off-by: Gary Lockyer

source4 smbd: Make the service_details structure constant.

2018-11-01T22:49:24+00:00

Make the service_details structure a static const.

Signed-off-by: Gary Lockyer

ldap_server: Fix CID 1435721 Unchecked return value

2018-05-24T01:35:00+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Thu May 24 03:35:00 CEST 2018 on sn-devel-144

ldap_server: Fix CID 1435731 Unchecked return value

2018-05-23T22:43:51+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

samdb: Add remote address to connect

2018-05-10T18:02:23+00:00

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

dsdb: pass the remote address to samdb connect

2018-05-10T18:02:23+00:00

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

s4:ldap_server: Fix size types

2018-03-20T22:16:15+00:00

This fixes compilation with -Wstrict-overflow=2

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

source4/smbd: Do not overstamp the process model with "single"

2017-10-19T03:33:10+00:00

Instead, except in RPC which is a special SNOWFLAKE, we rely on the struct
service_details in the init function.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Garming Sam

source4/smbd: refactor the process model for prefork

2017-10-19T03:33:09+00:00

    Refactor the process model code to allow the addition of a prefork
    process model.

    - Add a process context to contain process model specific state
    - Add a service details structure to allow service to indicate which
      process model options they can support.

    In the new code the services advertise the features they support to the
    process model.  The process model context is plumbed through to allow the
    process model to keep track of the supported options, and any state
    the process model may require.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Garming Sam