diff options
Diffstat (limited to 'package/network/services/samba36/patches/032-CVE-2018-1050-v3-6.patch')
-rw-r--r-- | package/network/services/samba36/patches/032-CVE-2018-1050-v3-6.patch | 49 |
1 files changed, 0 insertions, 49 deletions
diff --git a/package/network/services/samba36/patches/032-CVE-2018-1050-v3-6.patch b/package/network/services/samba36/patches/032-CVE-2018-1050-v3-6.patch deleted file mode 100644 index 4c44243a63..0000000000 --- a/package/network/services/samba36/patches/032-CVE-2018-1050-v3-6.patch +++ /dev/null @@ -1,49 +0,0 @@ -From 6cc45e3452194f312e04109cfdae047eb0719c7c Mon Sep 17 00:00:00 2001 -From: Jeremy Allison <jra@samba.org> -Date: Tue, 2 Jan 2018 15:56:03 -0800 -Subject: [PATCH] CVE-2018-1050: s3: RPC: spoolss server. Protect against null - pointer derefs. - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=11343 - -Signed-off-by: Jeremy Allison <jra@samba.org> ---- - source3/rpc_server/spoolss/srv_spoolss_nt.c | 13 +++++++++++++ - 1 file changed, 13 insertions(+) - ---- a/source3/rpc_server/spoolss/srv_spoolss_nt.c -+++ b/source3/rpc_server/spoolss/srv_spoolss_nt.c -@@ -176,6 +176,11 @@ static void prune_printername_cache(void - static const char *canon_servername(const char *servername) - { - const char *pservername = servername; -+ -+ if (servername == NULL) { -+ return ""; -+ } -+ - while (*pservername == '\\') { - pservername++; - } -@@ -2080,6 +2085,10 @@ WERROR _spoolss_DeletePrinterDriver(stru - return WERR_ACCESS_DENIED; - } - -+ if (r->in.architecture == NULL || r->in.driver == NULL) { -+ return WERR_INVALID_ENVIRONMENT; -+ } -+ - /* check that we have a valid driver name first */ - - if ((version = get_version_id(r->in.architecture)) == -1) -@@ -2225,6 +2234,10 @@ WERROR _spoolss_DeletePrinterDriverEx(st - return WERR_ACCESS_DENIED; - } - -+ if (r->in.architecture == NULL || r->in.driver == NULL) { -+ return WERR_INVALID_ENVIRONMENT; -+ } -+ - /* check that we have a valid driver name first */ - if (get_version_id(r->in.architecture) == -1) { - /* this is what NT returns */ |