librpc: Do not follow a NULL pointer when calculating the size of a union
authorAndrew Bartlett <abartlet@samba.org>
Tue, 19 Nov 2019 04:38:50 +0000 (17:38 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 12 Dec 2019 02:30:40 +0000 (02:30 +0000)
commit92a7c5a7262cb78fb6307e9168a540154cbe2f71
treed0304fe5e6a5b50389425a2ee40b3d4263ed777e
parent456cdb7fa35f2b5778c7a5c852acc6180cbe03b4
librpc: Do not follow a NULL pointer when calculating the size of a union

Found by Douglas Bagnall using Hongfuzz and the new fuzz_ndr_X
fuzzer.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13876

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
librpc/ndr/ndr.c
selftest/knownfail.d/ndrdump-NULL-union [deleted file]