diff options
author | Andrew Bartlett <abartlet@samba.org> | 2013-01-03 20:39:23 +1100 |
---|---|---|
committer | Karolin Seeger <kseeger@samba.org> | 2013-01-14 19:15:45 +0100 |
commit | a75805490d96a85786287f5d0522dd7671d6816e (patch) | |
tree | abf3a0bf44ff67b56eee64e621ae1c5bde789f1d | |
parent | df33344d8eb40221d60c99931690703a11d91bc2 (diff) | |
download | samba-a75805490d96a85786287f5d0522dd7671d6816e.tar.gz |
libcli/security: Ensure to fill in remaining_access for the initial case (bug #9554 - CVE-2013-0172)
It is critically important that we initialise this element as otherwise
all access is permitted.
Andrew Bartlett
Reviewed-by: Stefan Metzmacher <metze@samba.org>
-rw-r--r-- | libcli/security/object_tree.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/libcli/security/object_tree.c b/libcli/security/object_tree.c index 6809c8e3452..dcbd310baea 100644 --- a/libcli/security/object_tree.c +++ b/libcli/security/object_tree.c @@ -53,6 +53,7 @@ bool insert_in_object_tree(TALLOC_CTX *mem_ctx, return false; } (*root)->guid = *guid; + (*root)->remaining_access = init_access; *new_node = *root; return true; } |