librpc ndr: ndr_pull_advance check for unsigned overflow.
authorGary Lockyer <gary@catalyst.net.nz>
Tue, 14 Jan 2020 23:37:06 +0000 (12:37 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Fri, 7 Feb 2020 08:53:40 +0000 (08:53 +0000)
commit14182350f8397d27d7642dae595dc52691f0acfe
treeec3fa6470b424836fb55f6ea7ab8dde1c666edc0
parentd1277f4d02701ac77f8538af353479b52aa81157
librpc ndr: ndr_pull_advance check for unsigned overflow.

Handle uint32 overflow in ndr_pull_advance

Credit to OSS-Fuzz

REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20083
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14236

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
librpc/ndr/ndr.c
selftest/knownfail.d/bug-14236