diff options
| author | Björn Baumbach <bb@sernet.de> | 2019-08-06 16:32:32 +0200 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2019-10-24 11:45:18 +0200 |
| commit | d58567ee7338dcd9688e9a059ec6a32519625548 (patch) | |
| tree | ad54bee0ecec393d947bf1c8d68adf4351b6afac /selftest | |
| parent | 9c8e722fea1611d31bce2d88cfef2e9588a653de (diff) | |
| download | samba-d58567ee7338dcd9688e9a059ec6a32519625548.tar.gz | |
CVE-2019-14833 dsdb: send full password to check password script
utf8_len represents the number of characters (not bytes) of the
password. If the password includes multi-byte characters it is required
to write the total number of bytes to the check password script.
Otherwise the last bytes of the password string would be ignored.
Therefore we rename utf8_len to be clear what it does and does
not represent.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12438
Signed-off-by: Björn Baumbach <bb@sernet.de>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'selftest')
| -rw-r--r-- | selftest/knownfail.d/unacceptable-passwords | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/selftest/knownfail.d/unacceptable-passwords b/selftest/knownfail.d/unacceptable-passwords deleted file mode 100644 index 75fa2fc32b8..00000000000 --- a/selftest/knownfail.d/unacceptable-passwords +++ /dev/null @@ -1 +0,0 @@ -^samba.tests.samba_tool.user_check_password_script.samba.tests.samba_tool.user_check_password_script.UserCheckPwdTestCase.test_checkpassword_unacceptable\(chgdcpass:local\)
\ No newline at end of file |