git.samba.org / samba.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 994308c) | patch
pidl/NDR/Parser: use ParseArrayPullGetLength() to get the number of array elements...
authorStefan Metzmacher <metze@samba.org>
Thu, 15 Mar 2012 12:07:47 +0000 (13:07 +0100)
committerKarolin Seeger <kseeger@samba.org>
Tue, 10 Apr 2012 18:35:44 +0000 (20:35 +0200)
commit7b711ce91a01dae266e4acaa5ab6487109e1264f
tree9fcfac200a9f639871cf068ab9ce27510a453a8etree
parent994308c556fbaf4943e0d9c71d0c1cea0ebb5fb5commit | diff
pidl/NDR/Parser: use ParseArrayPullGetLength() to get the number of array elements (bug #8815 / CVE-2012-1182)

An anonymous researcher and Brian Gorenc (HP DVLabs) working
with HP's Zero Day Initiative program have found this and notified us.

metze
(cherry picked from commit 586c3fab85cde3bd6a5141fbba3bb5fcb6b67ab5)
pidl/lib/Parse/Pidl/Samba4/NDR/Parser.pm diff | blob | history
Samba Shared Repository