svn commit: samba r19693 - in branches/SAMBA_3_0_RELEASE/source: lib libads libsmb smbd

[jerry at samba.org]

Author: jerry
Date: 2006-11-13 18:44:26 +0000 (Mon, 13 Nov 2006)
New Revision: 19693

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=19693

Log:
merge from SAMBA_3_0_23 tree
Modified:
   branches/SAMBA_3_0_RELEASE/source/lib/timegm.c
   branches/SAMBA_3_0_RELEASE/source/libads/ldap.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/smb_signing.c
   branches/SAMBA_3_0_RELEASE/source/smbd/posix_acls.c


Changeset:
Modified: branches/SAMBA_3_0_RELEASE/source/lib/timegm.c
===================================================================
--- branches/SAMBA_3_0_RELEASE/source/lib/timegm.c	2006-11-13 14:22:56 UTC (rev 19692)
+++ branches/SAMBA_3_0_RELEASE/source/lib/timegm.c	2006-11-13 18:44:26 UTC (rev 19693)
@@ -53,6 +53,16 @@
 	time_t res = 0;
 	unsigned i;
 	
+	if (tm->tm_mon > 12 ||
+	    tm->tm_mon < 0 ||
+	    tm->tm_mday > 31 ||
+	    tm->tm_min > 60 ||
+	    tm->tm_sec > 60 ||
+	    tm->tm_hour > 24) {
+		/* invalid tm structure */
+		return 0;
+	}
+
 	for (i = 70; i < tm->tm_year; ++i)
 		res += is_leap(i) ? 366 : 365;
 	

Modified: branches/SAMBA_3_0_RELEASE/source/libads/ldap.c
===================================================================
--- branches/SAMBA_3_0_RELEASE/source/libads/ldap.c	2006-11-13 14:22:56 UTC (rev 19692)
+++ branches/SAMBA_3_0_RELEASE/source/libads/ldap.c	2006-11-13 18:44:26 UTC (rev 19693)
@@ -1200,8 +1200,8 @@
 char *ads_default_ou_string(ADS_STRUCT *ads, const char *wknguid)
 {
 	ADS_STATUS status;
-	void *res;
-	char *base, *wkn_dn, *ret, **wkn_dn_exp, **bind_dn_exp;
+	void *res = NULL;
+	char *base, *wkn_dn, *ret = NULL, **wkn_dn_exp, **bind_dn_exp;
 	const char *attrs[] = {"distinguishedName", NULL};
 	int new_ln, wkn_ln, bind_ln, i;
 
@@ -1217,20 +1217,28 @@
 	status = ads_search_dn(ads, &res, base, attrs);
 	if (!ADS_ERR_OK(status)) {
 		DEBUG(1,("Failed while searching for: %s\n", base));
-		SAFE_FREE(base);
-		return NULL;
+		goto out;
 	}
-	SAFE_FREE(base);
 
 	if (ads_count_replies(ads, res) != 1) {
-		ads_msgfree(ads, res);
-		return NULL;
+		goto out;
 	}
 
 	/* substitute the bind-path from the well-known-guid-search result */
 	wkn_dn = ads_get_dn(ads, res);
+	if (!wkn_dn) {
+		goto out;
+	}
+
 	wkn_dn_exp = ldap_explode_dn(wkn_dn, 0);
+	if (!wkn_dn_exp) {
+		goto out;
+	}
+
 	bind_dn_exp = ldap_explode_dn(ads->config.bind_path, 0);
+	if (!bind_dn_exp) {
+		goto out;
+	}
 
 	for (wkn_ln=0; wkn_dn_exp[wkn_ln]; wkn_ln++)
 		;
@@ -1240,18 +1248,36 @@
 	new_ln = wkn_ln - bind_ln;
 
 	ret = SMB_STRDUP(wkn_dn_exp[0]);
+	if (!ret) {
+		goto out;
+	}
 
 	for (i=1; i < new_ln; i++) {
-		char *s;
-		asprintf(&s, "%s,%s", ret, wkn_dn_exp[i]);
+		char *s = NULL;
+		
+		if (asprintf(&s, "%s,%s", ret, wkn_dn_exp[i]) == -1) {
+			SAFE_FREE(ret);
+			goto out;
+		}
+
+		SAFE_FREE(ret);
 		ret = SMB_STRDUP(s);
 		free(s);
+		if (!ret) {
+			goto out;
+		}
 	}
 
+ out:
+	SAFE_FREE(base);
 	ads_msgfree(ads, res);
 	ads_memfree(ads, wkn_dn);
-	ldap_value_free(wkn_dn_exp);
-	ldap_value_free(bind_dn_exp);
+	if (wkn_dn_exp) {
+		ldap_value_free(wkn_dn_exp);
+	}
+	if (bind_dn_exp) {
+		ldap_value_free(bind_dn_exp);
+	}
 
 	return ret;
 }

Modified: branches/SAMBA_3_0_RELEASE/source/libsmb/smb_signing.c
===================================================================
--- branches/SAMBA_3_0_RELEASE/source/libsmb/smb_signing.c	2006-11-13 14:22:56 UTC (rev 19692)
+++ branches/SAMBA_3_0_RELEASE/source/libsmb/smb_signing.c	2006-11-13 18:44:26 UTC (rev 19693)
@@ -613,6 +613,10 @@
 		return True;
 	}
 
+	if (!data) {
+		return False;
+	}
+
 	if (!set_sequence_can_delete_flag(&data->outstanding_packet_list, mid, False)) {
 		return False;
 	}
@@ -634,6 +638,10 @@
 		return True;
 	}
 
+	if (!data) {
+		return False;
+	}
+
 	if (!set_sequence_can_delete_flag(&data->outstanding_packet_list, mid, True)) {
 		return False;
 	}

Modified: branches/SAMBA_3_0_RELEASE/source/smbd/posix_acls.c
===================================================================
--- branches/SAMBA_3_0_RELEASE/source/smbd/posix_acls.c	2006-11-13 14:22:56 UTC (rev 19692)
+++ branches/SAMBA_3_0_RELEASE/source/smbd/posix_acls.c	2006-11-13 18:44:26 UTC (rev 19693)
@@ -2257,8 +2257,8 @@
 static BOOL acl_group_override(connection_struct *conn, gid_t prim_gid)
 {
 	if ( (errno == EACCES || errno == EPERM) 
-		&& (lp_acl_group_control(SNUM(conn) || lp_dos_filemode(SNUM(conn)))) 
-		&& current_user_in_group(prim_gid) ) 
+		&& (lp_acl_group_control(SNUM(conn)) || lp_dos_filemode(SNUM(conn)))
+		&& current_user_in_group(prim_gid)) 
 	{
 		return True;
 	}