CVE-2023-34968: mdssvc: introduce an allocating wrapper to sl_pack()
authorRalph Boehme <slow@samba.org>
Mon, 19 Jun 2023 16:16:57 +0000 (18:16 +0200)
committerJule Anger <janger@samba.org>
Fri, 21 Jul 2023 12:05:35 +0000 (12:05 +0000)
commitd402c0cc6add369885d990fedbe71ef5185a245b
tree5adf245a99c53a0911b22b4faee0d1f9ebc86a17
parentac9008a20c8954471c65694f92cf2029f947d0d1
CVE-2023-34968: mdssvc: introduce an allocating wrapper to sl_pack()

sl_pack_alloc() does the buffer allocation that previously all callers of
sl_pack() did themselves.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15388

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source3/rpc_client/cli_mdssvc_util.c
source3/rpc_server/mdssvc/marshalling.c
source3/rpc_server/mdssvc/marshalling.h
source3/rpc_server/mdssvc/mdssvc.c
source3/rpc_server/mdssvc/mdssvc.h
source3/rpc_server/mdssvc/srv_mdssvc_nt.c
source3/rpcclient/cmd_spotlight.c
source4/torture/rpc/mdssvc.c