diff options
author | Ralph Boehme <slow@samba.org> | 2015-12-16 09:55:37 +0100 |
---|---|---|
committer | Stefan Metzmacher <metze@samba.org> | 2016-04-12 19:25:26 +0200 |
commit | b720575f16d8a2006d10eb8a94c7134a30d5309d (patch) | |
tree | c36f252f4daaa0db61beb71859719e11592bb2cd /lib/param | |
parent | a046ffd6cd9ab81af33d4ccf2e683acf5bb6c5eb (diff) | |
download | samba-b720575f16d8a2006d10eb8a94c7134a30d5309d.tar.gz |
CVE-2016-2115: s3:libsmb: add signing constant SMB_SIGNING_IPC_DEFAULT
SMB_SIGNING_IPC_DEFAULT must be used from s3 client code when opening
RPC connections.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'lib/param')
-rw-r--r-- | lib/param/loadparm.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c index c416368ccc2..878744f805f 100644 --- a/lib/param/loadparm.c +++ b/lib/param/loadparm.c @@ -3393,10 +3393,13 @@ bool lpcfg_server_signing_allowed(struct loadparm_context *lp_ctx, bool *mandato case SMB_SIGNING_DESIRED: case SMB_SIGNING_IF_REQUIRED: break; - case SMB_SIGNING_DEFAULT: case SMB_SIGNING_OFF: allowed = false; break; + case SMB_SIGNING_DEFAULT: + case SMB_SIGNING_IPC_DEFAULT: + smb_panic(__location__); + break; } return allowed; |