summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2022-11-29 20:27:14 +0100
committerStefan Metzmacher <metze@samba.org>2022-12-14 00:48:49 +0100
commitc768a27bc13fff024db18f2101680d15c2268743 (patch)
treef7edf7271b3a276e1653fb7485fe195200f2cd81
parent9049c5442aaeccba6e9e68f230679349fa38217a (diff)
downloadsamba-c768a27bc13fff024db18f2101680d15c2268743.tar.gz
CVE-2022-37966 python:tests/krb5: ignore empty supplementalCredentials attributes
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit f434a30ee7c40aac4a223fcabac9ddd160a155a5)
-rw-r--r--python/samba/tests/krb5/kdc_base_test.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/python/samba/tests/krb5/kdc_base_test.py b/python/samba/tests/krb5/kdc_base_test.py
index 68862aefc3a..28cde91feca 100644
--- a/python/samba/tests/krb5/kdc_base_test.py
+++ b/python/samba/tests/krb5/kdc_base_test.py
@@ -564,6 +564,8 @@ class KDCBaseTest(RawKerberosTest):
for attr in attributes:
if attr.attid == drsuapi.DRSUAPI_ATTID_supplementalCredentials:
net_ctx.replicate_decrypt(bind, attr, rid)
+ if attr.value_ctr.num_values == 0:
+ continue
attr_val = attr.value_ctr.values[0].blob
spl = ndr_unpack(drsblobs.supplementalCredentialsBlob,