diff options
| author | Gary Lockyer <gary@catalyst.net.nz> | 2020-01-30 08:52:34 +1300 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2020-02-27 01:02:32 +0000 |
| commit | 2f8c3b62266b729b47d5ba25f1966786c1af0e5f (patch) | |
| tree | f0550b9fc19ac82419212423f41608bbe13bdb04 /librpc | |
| parent | 5d323f2a2e36c23a007d93394f25df0f3d30942d (diff) | |
| download | samba-2f8c3b62266b729b47d5ba25f1966786c1af0e5f.tar.gz | |
idl: drsuapi_DsaAddressListItem_V1 limit recursion
Limit number of drsuapi_DsaAddressListItem_V1 elements to 1024
Credit to OSS-Fuzz
REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19820
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14254
Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'librpc')
| -rw-r--r-- | librpc/idl/drsuapi.idl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/librpc/idl/drsuapi.idl b/librpc/idl/drsuapi.idl index 2aaae8dce59..04725276121 100644 --- a/librpc/idl/drsuapi.idl +++ b/librpc/idl/drsuapi.idl @@ -1452,7 +1452,7 @@ interface drsuapi /* list of network names of the DCs * to which the referral is directed */ typedef struct { - drsuapi_DsaAddressListItem_V1 *next; + [max_recursion(1024)] drsuapi_DsaAddressListItem_V1 *next; lsa_String *address; } drsuapi_DsaAddressListItem_V1; |