]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2023-34966: CI: test for sl_unpack_loop()
authorRalph Boehme <slow@samba.org>
Wed, 31 May 2023 13:34:26 +0000 (15:34 +0200)
committerJule Anger <janger@samba.org>
Fri, 14 Jul 2023 13:16:23 +0000 (15:16 +0200)
commit01cf3cf7a83f0f3fcdf1f4026327c84e4c17f853
tree657635466ac14baee66d07c92e6c72c258b592bc
parent2eabbe31f64a8456813a502afb05907beb46ffad
CVE-2023-34966: CI: test for sl_unpack_loop()

Send a maliciously crafted packet where a nil type has a subcount of 0. This
triggers an endless loop in mdssvc sl_unpack_loop().

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15340

Signed-off-by: Ralph Boehme <slow@samba.org>
source4/torture/rpc/mdssvc.c