S4: SEGV in acl_validate_spn_value: dnsHostName NULL

Arvid Requate requate at univention.de
Fri Mar 2 06:34:54 MST 2012


Hello,

this is a proposal for a patch addressing segmentation faults due to a 
dnsHostName NULL pointer in acl_validate_spn_value. Diff is attached. The 
segfault closes all sockets in /var/run/samba/ncalrpc effecting netlogon and 
replication failures. The issue seems to be triggered in situations where 
clients attempt to register a new SPN while their SAM account object does not 
provide a value for the "dnsHostName" attribute. This seems to be the case for 
machine accounts in domains migrated by samba3upgrade.

Cheers,
Arvid

-- 
Arvid Requate
Open Source Software Engineer

Univention GmbH
Linux for your business
Mary-Somerville-Str.1
28359 Bremen
Tel. : +49 421 22232-0
Fax : +49 421 22232-99

requate at univention.de
http://www.univention.de

Geschäftsführer: Peter H. Ganten
HRB 20755 Amtsgericht Bremen
Steuer-Nr.: 71-597-02876 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-SEGV-in-acl_validate_spn_value-dnsHostName-NULL.patch
Type: text/x-patch
Size: 1196 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120302/e383fb5b/attachment.bin>


More information about the samba-technical mailing list