CVE-2020-25717: s3:torture: start with authoritative = 1
authorStefan Metzmacher <metze@samba.org>
Tue, 26 Oct 2021 15:42:41 +0000 (17:42 +0200)
committerPavel Filipenský <pfilipensky@samba.org>
Wed, 18 Jan 2023 12:00:51 +0000 (13:00 +0100)
This is not strictly needed, but makes it easier to audit
that we don't miss important places.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556

Signed-off-by: Stefan Metzmacher <metze@samba.org>
[scabrero@samba.org Backported to 4.11 due to missing commit
 a5548af018643f2e78c482e33ef0e6073db149e4 to check return value
 of SMBOWFencrypt()]

source3/torture/pdbtest.c

index 5d74aa9ab78004a0eec45195350793af68e45711..b300504c4cb451d11e909b124a1aed05da1e6bd1 100644 (file)
@@ -277,7 +277,7 @@ static bool test_auth(TALLOC_CTX *mem_ctx, struct samu *pdb_entry)
        struct netr_SamInfo6 *info6_wbc = NULL;
        NTSTATUS status;
        bool ok;
-       uint8_t authoritative = 0;
+       uint8_t authoritative = 1;
        int rc;
 
        rc = SMBOWFencrypt(pdb_get_nt_passwd(pdb_entry), challenge_8,