diff options
| author | Volker Lendecke <vl@samba.org> | 2022-02-23 15:56:41 +0100 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2022-03-01 20:59:55 +0000 |
| commit | 8c97743511e4d53f795f2469a28aabfb96da0dfa (patch) | |
| tree | 2587095ef0f36237793de113609fe33a498b65ca /third_party/heimdal/lib/krb5/acache.c | |
| parent | 579c475fa6293017fd4137fa99a0ae091dfdfcad (diff) | |
| download | samba-8c97743511e4d53f795f2469a28aabfb96da0dfa.tar.gz | |
smbd: Fix a use-after-free
stat_cache_lookup() allocates its result on top of talloc_tos().
filename_convert_smb1_search_path() creates a talloc_stackframe(),
which makes the names which were supposed to be allocated on the "ctx"
parameter of filename_convert_smb1_search_path() go away too
early. Reparent the results from stat_cache_lookup() properly.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=14989
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Mar 1 20:59:55 UTC 2022 on sn-devel-184
Diffstat (limited to 'third_party/heimdal/lib/krb5/acache.c')
0 files changed, 0 insertions, 0 deletions