CVE-2023-34967: mdssvc: add type checking to dalloc_value_for_key()
authorRalph Boehme <slow@samba.org>
Fri, 26 May 2023 13:06:38 +0000 (15:06 +0200)
committerJule Anger <janger@samba.org>
Fri, 21 Jul 2023 12:05:35 +0000 (12:05 +0000)
commit4c60e35add4a1abd04334012a8d6edf1c3f396ba
treed606dbc4c215a30d5e914dc2a4a0eef17902953e
parent3b3c30e2acfb00d04c4013e32343bc277d5b1aa8
CVE-2023-34967: mdssvc: add type checking to dalloc_value_for_key()

Change the dalloc_value_for_key() function to require an additional final
argument which denotes the expected type of the value associated with a key. If
the types don't match, return NULL.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15341

Signed-off-by: Ralph Boehme <slow@samba.org>
source3/rpc_server/mdssvc/dalloc.c
source3/rpc_server/mdssvc/mdssvc.c