Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

mount.cifs: two bug fixes #7

Merged
merged 2 commits into from
Apr 27, 2022
Merged

mount.cifs: two bug fixes #7

merged 2 commits into from
Apr 27, 2022

Conversation

ddiss
Copy link

@ddiss ddiss commented Apr 26, 2022

Both reported and fixed by Jeffrey Bencteux

Previous check was true whatever the length of the input string was,
leading to a buffer overflow in the subsequent strcpy call.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15025

Signed-off-by: Jeffrey Bencteux <jbe@improsec.com>
Reviewed-by: David Disseldorp <ddiss@suse.de>
When verbose logging is enabled, invalid credentials file lines may be
dumped to stderr. This may lead to information disclosure in particular
conditions when the credentials file given is sensitive and contains '='
signs.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15026

Signed-off-by: Jeffrey Bencteux <jbe@improsec.com>
Reviewed-by: David Disseldorp <ddiss@suse.de>
@piastry piastry merged commit 8acc963 into piastry:master Apr 27, 2022
@piastry
Copy link
Owner

piastry commented Apr 27, 2022

Merged. Thanks!

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants