svn commit: samba r25099 - in branches: SAMBA_3_2/source/nsswitch SAMBA_3_2_0/source/nsswitch

[jerry at samba.org]

Author: jerry
Date: 2007-09-11 18:08:07 +0000 (Tue, 11 Sep 2007)
New Revision: 25099

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25099

Log:
Commit fix for CVE-2007-4138 from 3.0.26 release.


Modified:
   branches/SAMBA_3_2/source/nsswitch/idmap_ad.c
   branches/SAMBA_3_2_0/source/nsswitch/idmap_ad.c


Changeset:
Modified: branches/SAMBA_3_2/source/nsswitch/idmap_ad.c
===================================================================
--- branches/SAMBA_3_2/source/nsswitch/idmap_ad.c	2007-09-11 18:02:30 UTC (rev 25098)
+++ branches/SAMBA_3_2/source/nsswitch/idmap_ad.c	2007-09-11 18:08:07 UTC (rev 25099)
@@ -773,7 +773,7 @@
        
 	if ( gid ) {		
 		if ( !ads_pull_uint32(ads, msg, ad_schema->posix_gidnumber_attr, gid ) )
-			*gid = 0;		
+			*gid = (uint32)-1;		
 	}
 		
 	return NT_STATUS_OK;

Modified: branches/SAMBA_3_2_0/source/nsswitch/idmap_ad.c
===================================================================
--- branches/SAMBA_3_2_0/source/nsswitch/idmap_ad.c	2007-09-11 18:02:30 UTC (rev 25098)
+++ branches/SAMBA_3_2_0/source/nsswitch/idmap_ad.c	2007-09-11 18:08:07 UTC (rev 25099)
@@ -773,7 +773,7 @@
        
 	if ( gid ) {		
 		if ( !ads_pull_uint32(ads, msg, ad_schema->posix_gidnumber_attr, gid ) )
-			*gid = 0;		
+			*gid = (uint32)-1;		
 	}
 		
 	return NT_STATUS_OK;