samba.git/source4/libcli, branch talloc-2.1.7 Unnamed repository; edit this file 'description' to name the repository. s4:libcli: fix 'Conditional jump or move' valgrind error 2016-04-25T08:35:15+00:00 Noel Power noel.power@suse.com 2016-04-18T12:02:59+00:00 03302bcb8649aade7d9ed7e011710e4430f542ae smbtorture test base.tcondev.tcondev causes the following valgrind trace ==23282== Conditional jump or move depends on uninitialised value(s) ==23282== at 0x9BE5632: smbcli_tconX (cliconnect.c:148) ==23282== by 0x41021C: tcon_devtest (base.c:91) ==23282== by 0x411A01: run_tcon_devtype_test (base.c:522) ==23282== by 0x16B21D: wrap_simple_1smb_test (util_smb.c:856) ==23282== by 0x955368F: internal_torture_run_test (torture.c:442) ==23282== by 0x9553A6B: torture_run_test_restricted (torture.c:542) ==23282== by 0x2600A4: run_matching (smbtorture.c:110) ==23282== by 0x25FF66: run_matching (smbtorture.c:95) ==23282== by 0x2601C5: torture_run_named_tests (smbtorture.c:143) ==23282== by 0x261E44: main (smbtorture.c:665) ==23282== Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Volker Lendecke <vl@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
smbtorture test base.tcondev.tcondev causes the following valgrind trace

==23282== Conditional jump or move depends on uninitialised value(s)
==23282==    at 0x9BE5632: smbcli_tconX (cliconnect.c:148)
==23282==    by 0x41021C: tcon_devtest (base.c:91)
==23282==    by 0x411A01: run_tcon_devtype_test (base.c:522)
==23282==    by 0x16B21D: wrap_simple_1smb_test (util_smb.c:856)
==23282==    by 0x955368F: internal_torture_run_test (torture.c:442)
==23282==    by 0x9553A6B: torture_run_test_restricted (torture.c:542)
==23282==    by 0x2600A4: run_matching (smbtorture.c:110)
==23282==    by 0x25FF66: run_matching (smbtorture.c:95)
==23282==    by 0x2601C5: torture_run_named_tests (smbtorture.c:143)
==23282==    by 0x261E44: main (smbtorture.c:665)
==23282==

Signed-off-by: Noel Power <noel.power@suse.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
s4:libcli:smb2: Use constant time memcmp() to verify the signature 2016-04-19T07:37:14+00:00 Andreas Schneider asn@samba.org 2016-04-01T08:16:25+00:00 03e8152e39f2e0f931e9fd73f9e6a83d3a92fc1e Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
CVE-2016-2115: s4:libcli/raw: pass the minprotocol to smb_raw_negotiate*() 2016-04-12T17:25:26+00:00 Stefan Metzmacher metze@samba.org 2016-02-27T03:15:38+00:00 68d6c10e5e7f14bc2473d53fde38593ff280a439 BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2016-2115: s4:libcli/raw: limit maxprotocol to NT1 in smb_raw_negotiate*() 2016-04-12T17:25:26+00:00 Stefan Metzmacher metze@samba.org 2016-02-27T03:15:38+00:00 57f0b0c6c085bfac4b25b3711dfa671152e180c4 BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2016-2115: s4:libcli/smb2: use the configured min_protocol 2016-04-12T17:25:26+00:00 Stefan Metzmacher metze@samba.org 2016-02-27T03:14:39+00:00 57212343283b2b43c67ee05db2fb2d8d527054bf BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2016-2115: s4:libcli/raw: add smbcli_options.min_protocol 2016-04-12T17:25:26+00:00 Stefan Metzmacher metze@samba.org 2016-02-27T03:13:11+00:00 35ce75ec9eb0e3f2113a089b59967dddf3a122f9 BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2016-2113: s4:libcli/ldap: verify the server certificate and hostname if configured 2016-04-12T17:25:25+00:00 Stefan Metzmacher metze@samba.org 2015-12-23T15:17:04+00:00 4b679c350a7fdaab114b6c7d05e6a6b12e903c3d BUG: https://bugzilla.samba.org/show_bug.cgi?id=11752 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11752

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
CVE-2016-2113: s4:lib/tls: implement infrastructure to do peer verification 2016-04-12T17:25:25+00:00 Stefan Metzmacher metze@samba.org 2015-12-23T15:17:04+00:00 64a9cd2a38d8a9503560524f5a6feea25651f11c BUG: https://bugzilla.samba.org/show_bug.cgi?id=11752 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11752

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
CVE-2016-2112: s4:libcli/ldap: auto upgrade to SIGN after STRONG_AUTH_REQUIRED 2016-04-12T17:25:24+00:00 Stefan Metzmacher metze@samba.org 2015-12-18T07:29:50+00:00 05692ec958e64cca8ef19795e51bb39a242c3dd4 BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
CVE-2016-2112: s4:libcli/ldap: make sure we detect downgrade attacks 2016-04-12T17:25:24+00:00 Stefan Metzmacher metze@samba.org 2015-12-18T07:29:50+00:00 1da744b2f9371c005c68a89f72b475e42e8b2b64 BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>