CVE-2015-5370: s4:rpc_server: no authentication is indicated by pkt->auth_length...
authorStefan Metzmacher <metze@samba.org>
Fri, 26 Jun 2015 06:10:46 +0000 (08:10 +0200)
committerStefan Metzmacher <metze@samba.org>
Tue, 12 Apr 2016 17:25:29 +0000 (19:25 +0200)
commitb6ac2275c39955cc0184fbc7b2fbe520a59f5a9e
tree20ef49e7c5501f7662033cc0b93e62b1778dd7f4
parent2396086678ca98d8bd97cb268cd69c9af5e9b4f3
CVE-2015-5370: s4:rpc_server: no authentication is indicated by pkt->auth_length == 0

pkt->u.*.auth_info.length is not the correct thing to check.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
selftest/knownfail
source4/rpc_server/dcesrv_auth.c