git.samba.org / bjacke / samba-autobuild / .git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8d34d17) | patch
CVE-2019-3824 ldb: wildcard_match check tree operation
authorGary Lockyer <gary@catalyst.net.nz>
Mon, 18 Feb 2019 21:26:25 +0000 (10:26 +1300)
committerGary Lockyer <gary@samba.org>
Mon, 25 Feb 2019 20:26:11 +0000 (21:26 +0100)
commit34383981a0c40860f71a4451ff8fd752e1b67666
tree5e7a0aba6cab73ecf5c4d711151aa9da8b00b1cetree
parent8d34d172092f71baad0d777567e49aebfa07313dcommit | diff
CVE-2019-3824 ldb: wildcard_match check tree operation

Check the operation type of the passed parse tree, and return
LDB_INAPPROPRIATE_MATCH if the operation is not LDB_OP_SUBSTRING.

A query of "attribute=*" gets parsed as LDB_OP_PRESENT, checking the
operation and failing ldb_wildcard_match should help prevent confusion
writing tests.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13773

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
lib/ldb/common/ldb_match.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.