summaryrefslogtreecommitdiff
path: root/libcli
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2013-01-03 20:39:23 +1100
committerKarolin Seeger <kseeger@samba.org>2013-01-14 19:15:45 +0100
commita75805490d96a85786287f5d0522dd7671d6816e (patch)
treeabf3a0bf44ff67b56eee64e621ae1c5bde789f1d /libcli
parentdf33344d8eb40221d60c99931690703a11d91bc2 (diff)
downloadsamba-a75805490d96a85786287f5d0522dd7671d6816e.tar.gz
libcli/security: Ensure to fill in remaining_access for the initial case (bug #9554 - CVE-2013-0172)
It is critically important that we initialise this element as otherwise all access is permitted. Andrew Bartlett Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'libcli')
-rw-r--r--libcli/security/object_tree.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/libcli/security/object_tree.c b/libcli/security/object_tree.c
index 6809c8e3452..dcbd310baea 100644
--- a/libcli/security/object_tree.c
+++ b/libcli/security/object_tree.c
@@ -53,6 +53,7 @@ bool insert_in_object_tree(TALLOC_CTX *mem_ctx,
return false;
}
(*root)->guid = *guid;
+ (*root)->remaining_access = init_access;
*new_node = *root;
return true;
}