summaryrefslogtreecommitdiff
path: root/lib/param
diff options
context:
space:
mode:
authorRalph Boehme <slow@samba.org>2015-12-16 09:55:37 +0100
committerStefan Metzmacher <metze@samba.org>2016-04-12 19:25:26 +0200
commitb720575f16d8a2006d10eb8a94c7134a30d5309d (patch)
treec36f252f4daaa0db61beb71859719e11592bb2cd /lib/param
parenta046ffd6cd9ab81af33d4ccf2e683acf5bb6c5eb (diff)
downloadsamba-b720575f16d8a2006d10eb8a94c7134a30d5309d.tar.gz
CVE-2016-2115: s3:libsmb: add signing constant SMB_SIGNING_IPC_DEFAULT
SMB_SIGNING_IPC_DEFAULT must be used from s3 client code when opening RPC connections. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'lib/param')
-rw-r--r--lib/param/loadparm.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c
index c416368ccc2..878744f805f 100644
--- a/lib/param/loadparm.c
+++ b/lib/param/loadparm.c
@@ -3393,10 +3393,13 @@ bool lpcfg_server_signing_allowed(struct loadparm_context *lp_ctx, bool *mandato
case SMB_SIGNING_DESIRED:
case SMB_SIGNING_IF_REQUIRED:
break;
- case SMB_SIGNING_DEFAULT:
case SMB_SIGNING_OFF:
allowed = false;
break;
+ case SMB_SIGNING_DEFAULT:
+ case SMB_SIGNING_IPC_DEFAULT:
+ smb_panic(__location__);
+ break;
}
return allowed;