]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2020-25722 Check all elements in acl_check_spn() not just the first one
authorAndrew Bartlett <abartlet@samba.org>
Mon, 1 Nov 2021 04:19:29 +0000 (17:19 +1300)
committerJule Anger <janger@samba.org>
Mon, 8 Nov 2021 09:52:11 +0000 (10:52 +0100)
commitf1c64ed29ea0911beaa1cd3b80915ef5b44085af
treeb15aaaf80cca0e69c4876d7a1002b0e8ffff6dd1
parentae9eb6c7d85deda7a20867eeecb8835defc1990a
CVE-2020-25722 Check all elements in acl_check_spn() not just the first one

Thankfully we are aleady in a loop over all the message elements in
acl_modify() so this is an easy and safe change to make.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14876
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
selftest/knownfail.d/acl-spn [deleted file]
source4/dsdb/samdb/ldb_modules/acl.c