CVE-2020-10700: ldb: Always use ldb_next_request() in ASQ module
authorAndrew Bartlett <abartlet@samba.org>
Wed, 11 Mar 2020 03:41:34 +0000 (16:41 +1300)
committerKarolin Seeger <kseeger@samba.org>
Mon, 4 May 2020 08:19:41 +0000 (08:19 +0000)
commitc309e6b2a704472ab2870e226bdaa172b4bf0fb8
tree0b4f1a28426fa62ce89c4843103fbbfb8067972d
parent5603d26770a41e81c035cf8c3c5931b143e1d330
CVE-2020-10700: ldb: Always use ldb_next_request() in ASQ module

We want to keep going down the module stack, and not start from the top again.

ASQ is above the ACL modules, but below paged_results and we do not wish to
re-trigger that work.

Thanks to Andrei Popa <andrei.popa@next-gen.ro> for finding,
reporting and working with us to diagnose this issue!

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14331

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
lib/ldb/modules/asq.c