From c768a27bc13fff024db18f2101680d15c2268743 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Tue, 29 Nov 2022 20:27:14 +0100 Subject: CVE-2022-37966 python:tests/krb5: ignore empty supplementalCredentials attributes BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237 Signed-off-by: Stefan Metzmacher Reviewed-by: Joseph Sutton Reviewed-by: Andrew Bartlett (cherry picked from commit f434a30ee7c40aac4a223fcabac9ddd160a155a5) --- python/samba/tests/krb5/kdc_base_test.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/python/samba/tests/krb5/kdc_base_test.py b/python/samba/tests/krb5/kdc_base_test.py index 68862aefc3a..28cde91feca 100644 --- a/python/samba/tests/krb5/kdc_base_test.py +++ b/python/samba/tests/krb5/kdc_base_test.py @@ -564,6 +564,8 @@ class KDCBaseTest(RawKerberosTest): for attr in attributes: if attr.attid == drsuapi.DRSUAPI_ATTID_supplementalCredentials: net_ctx.replicate_decrypt(bind, attr, rid) + if attr.value_ctr.num_values == 0: + continue attr_val = attr.value_ctr.values[0].blob spl = ndr_unpack(drsblobs.supplementalCredentialsBlob, -- cgit v1.2.1