diff options
| author | he <he@pkgsrc.org> | 2017-05-24 15:36:42 +0000 |
|---|---|---|
| committer | he <he@pkgsrc.org> | 2017-05-24 15:36:42 +0000 |
| commit | 06838fbc48b8146e90fb659fbd6b1fe41a0e0722 (patch) | |
| tree | 55a7e16653a165e1bec026c71d9bf02017820f56 /net/samba/patches | |
| parent | dd967503adc4ca49079a43449d17fc4dbec15d4a (diff) | |
| download | pkgsrc-06838fbc48b8146e90fb659fbd6b1fe41a0e0722.tar.gz | |
Adapt & apply fix for
https://bugzilla.samba.org/show_bug.cgi?id=12780 (non-public)
from
https://www.samba.org/samba/ftp/patches/security/samba-4.6.3-4.5.9-4.4.13-CVE-2017-7494.patch
Should fix CVE-2017-7494.
Bump PKGREVISION.
Diffstat (limited to 'net/samba/patches')
| -rw-r--r-- | net/samba/patches/patch-source3_rpc__server_srv__pipe.c | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/net/samba/patches/patch-source3_rpc__server_srv__pipe.c b/net/samba/patches/patch-source3_rpc__server_srv__pipe.c new file mode 100644 index 00000000000..34a1c67a54f --- /dev/null +++ b/net/samba/patches/patch-source3_rpc__server_srv__pipe.c @@ -0,0 +1,22 @@ +$NetBSD: patch-source3_rpc__server_srv__pipe.c,v 1.1 2017/05/24 15:36:42 he Exp $ + +Adapt & apply fix for +https://bugzilla.samba.org/show_bug.cgi?id=12780 (non-public) +from +https://www.samba.org/samba/ftp/patches/security/samba-4.6.3-4.5.9-4.4.13-CVE-2017-7494.patch +Should fix CVE-2017-7494. + +--- ../source3/rpc_server/srv_pipe.c.orig 2015-02-22 14:11:32.000000000 +0000 ++++ ../source3/rpc_server/srv_pipe.c +@@ -376,6 +376,11 @@ bool is_known_pipename(const char *cli_f + const char *pipename = cli_filename; + NTSTATUS status; + ++ if (strchr(pipename, '/')) { ++ DEBUG(1, ("Refusing open on pipe %s\n", pipename)); ++ return false; ++ } ++ + if (strnequal(pipename, "\\PIPE\\", 6)) { + pipename += 5; + } |