diff options
Diffstat (limited to 'net/samba/patches')
-rw-r--r-- | net/samba/patches/patch-source3_rpc__server_srv__pipe.c | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/net/samba/patches/patch-source3_rpc__server_srv__pipe.c b/net/samba/patches/patch-source3_rpc__server_srv__pipe.c new file mode 100644 index 00000000000..34a1c67a54f --- /dev/null +++ b/net/samba/patches/patch-source3_rpc__server_srv__pipe.c @@ -0,0 +1,22 @@ +$NetBSD: patch-source3_rpc__server_srv__pipe.c,v 1.1 2017/05/24 15:36:42 he Exp $ + +Adapt & apply fix for +https://bugzilla.samba.org/show_bug.cgi?id=12780 (non-public) +from +https://www.samba.org/samba/ftp/patches/security/samba-4.6.3-4.5.9-4.4.13-CVE-2017-7494.patch +Should fix CVE-2017-7494. + +--- ../source3/rpc_server/srv_pipe.c.orig 2015-02-22 14:11:32.000000000 +0000 ++++ ../source3/rpc_server/srv_pipe.c +@@ -376,6 +376,11 @@ bool is_known_pipename(const char *cli_f + const char *pipename = cli_filename; + NTSTATUS status; + ++ if (strchr(pipename, '/')) { ++ DEBUG(1, ("Refusing open on pipe %s\n", pipename)); ++ return false; ++ } ++ + if (strnequal(pipename, "\\PIPE\\", 6)) { + pipename += 5; + } |