]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2021-44141: s3: smbd: Inside check_reduced_name() ensure we return the correct...
authorJeremy Allison <jra@samba.org>
Tue, 7 Dec 2021 22:33:17 +0000 (14:33 -0800)
committerStefan Metzmacher <metze@samba.org>
Mon, 31 Jan 2022 14:26:10 +0000 (14:26 +0000)
commitf4202a0bccd5d52aa5448748cdd2d67a68738fc0
treeae4b58d5f8c8916b3eec2a71c7acfbb6f79b2586
parent4106af6d620e4b4b66c015333d8e1dac9b4e9fd1
CVE-2021-44141: s3: smbd: Inside check_reduced_name() ensure we return the correct error codes when failing symlinks.

NT_STATUS_OBJECT_PATH_NOT_FOUND for a path component failure.
NT_STATUS_OBJECT_NAME_NOT_FOUND for a terminal component failure.

Remove:

samba3.blackbox.test_symlink_traversal.SMB1.posix
samba3.blackbox.smbclient_s3.*.Ensure\ widelinks\ are\ restricted\(.*\)
samba3.blackbox.smbclient_s3.*.follow\ symlinks\ \=\ no\(.*\)

in knownfail.d/symlink_traversal as we now pass these. Only one more fix
remaining to get rid of knownfail.d/symlink_traversal completely.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14911

Signed-off-by: Jeremy Allison <jra@samba.org>
selftest/knownfail.d/symlink_traversal
source3/smbd/vfs.c