diff options
| author | Stefan Metzmacher <metze@samba.org> | 2015-09-30 21:17:02 +0200 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2015-12-16 12:56:48 +0100 |
| commit | f8b0f7fd94cf3c7630a108b80ea745d3e4e947be (patch) | |
| tree | e9ae6201d6e5763003242f4b2674230747f40940 /source3/libsmb/clidfs.c | |
| parent | acbb4ddb6876c15543c5370e6d27faacebc8a231 (diff) | |
| download | samba-f8b0f7fd94cf3c7630a108b80ea745d3e4e947be.tar.gz | |
CVE-2015-5296: s3:libsmb: force signing when requiring encryption in do_connect()
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11536
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Diffstat (limited to 'source3/libsmb/clidfs.c')
| -rw-r--r-- | source3/libsmb/clidfs.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/source3/libsmb/clidfs.c b/source3/libsmb/clidfs.c index 2121ad09f34..d3b0580230b 100644 --- a/source3/libsmb/clidfs.c +++ b/source3/libsmb/clidfs.c @@ -114,6 +114,11 @@ static NTSTATUS do_connect(TALLOC_CTX *ctx, const char *domain; NTSTATUS status; int flags = 0; + int signing_state = get_cmdline_auth_info_signing_state(auth_info); + + if (force_encrypt) { + signing_state = SMB_SIGNING_REQUIRED; + } /* make a copy so we don't modify the global string 'service' */ servicename = talloc_strdup(ctx,share); @@ -152,7 +157,7 @@ static NTSTATUS do_connect(TALLOC_CTX *ctx, status = cli_connect_nb( server, NULL, port, name_type, NULL, - get_cmdline_auth_info_signing_state(auth_info), + signing_state, flags, &c); if (!NT_STATUS_IS_OK(status)) { |