diff options
author | Joseph Sutton <josephsutton@catalyst.net.nz> | 2023-02-14 13:17:24 +1300 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2023-04-05 02:10:35 +0000 |
commit | 9f31e4139c12262f5626108c6a883f07c4dd314e (patch) | |
tree | c9799838caf4ebef10af3cfab6947d7b4d0e6546 /lib/ldb-samba | |
parent | 197633cc2ad2ac7e98013be093cbbb2fce083b4e (diff) | |
download | samba-9f31e4139c12262f5626108c6a883f07c4dd314e.tar.gz |
CVE-2023-0614 ldb: Centralise checking for inaccessible matches
This makes it less likely that we forget to handle a case.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15270
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'lib/ldb-samba')
-rw-r--r-- | lib/ldb-samba/ldb_matching_rules.c | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/lib/ldb-samba/ldb_matching_rules.c b/lib/ldb-samba/ldb_matching_rules.c index 0c4c31e49f9..b86594c1823 100644 --- a/lib/ldb-samba/ldb_matching_rules.c +++ b/lib/ldb-samba/ldb_matching_rules.c @@ -87,11 +87,6 @@ static int ldb_eval_transitive_filter_helper(TALLOC_CTX *mem_ctx, return LDB_SUCCESS; } - if (ldb_msg_element_is_inaccessible(el)) { - *matched = false; - return LDB_SUCCESS; - } - /* * If the value to match is present in the attribute values of the * current entry being visited, set matched to true and return OK |