[Samba] Ldapsearch against Samba AD returns records outside the search base

[Andrew Bartlett]

On Fri, 2020-02-07 at 07:16 +1300, Andrew Bartlett wrote:
> On Thu, 2020-02-06 at 16:21 +0200, Palle Kuling via samba wrote:
> > Hello,
> > 
> > I did a git bisect between 4.10.0rc1 and 4.11.0. The result is as 
> > follows:
> > b6b5b5fe355fee2a4096e9214831cb88c7a2a4c6 is the first bad commit
> > Date:   Wed Mar 6 15:28:45 2019 +1300
> > 
> >      lib ldb key value: fix index buffering
> > 
> > Is there anything else I should check?
> 
> Thanks, that helps a lot.  I'll be looking at this today and next
> week.

I've submitted a patch as a MR here:
https://gitlab.com/samba-team/samba/-/merge_requests/1125
https://bugzilla.samba.org/show_bug.cgi?id=14270

Can I get your permission to credit you for finding the bug, and can
you let me know any affiliation (eg employer) you would like mentioned?

I need to write some tests to be sure we never get this issue again,
but that will need to wait for Monday.

Thanks!

Andrew Bartlett
-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT - Expert Open Source
Solutions
https://catalyst.net.nz/services/samba