Changeset 336 for branches/samba-3.0/source

Timestamp:

Oct 8, 2009, 7:51:22 AM (16 years ago)

Author:

Herwig Bauernfeind

Message:

Update 3.0 to 3.0.37 (unsupported security update)

Location:

branches/samba-3.0/source

Files:

• VERSION (modified) (2 diffs)
• client/mount.cifs.c (modified) (7 diffs)
• include/smb.h (modified) (1 diff)
• include/version.h (modified) (1 diff)
• param/loadparm.c (modified) (2 diffs)
• passdb/pdb_tdb.c (modified) (2 diffs)
• smbd/process.c (modified) (7 diffs)
• smbd/service.c (modified) (2 diffs)

branches/samba-3.0/source/VERSION

@@ -26 +26 @@
 SAMBA_VERSION_MAJOR=3
 SAMBA_VERSION_MINOR=0
-SAMBA_VERSION_RELEASE=36
+SAMBA_VERSION_RELEASE=37
 
 ########################################################
@@ -96 +96 @@
 #  ->  "CVS 3.0.0rc2-VendorVersion"                    #
 ########################################################
-SAMBA_VERSION_VENDOR_SUFFIX="eCS 1.0.2"
+SAMBA_VERSION_VENDOR_SUFFIX=
 SAMBA_VERSION_VENDOR_PATCH=

branches/samba-3.0/source/client/mount.cifs.c

@@ -200 +200 @@
         FILE * fs;
         int i, length;
+
+        i = access(file_name, R_OK);
+        if (i)
+                return i;
+
         fs = fopen(file_name,"r");
         if(fs == NULL)
@@ -322 +327 @@
 
         if(filename != NULL) {
+                rc = access(filename, R_OK);
+                if (rc) {
+                        fprintf(stderr, "mount.cifs failed: access check of %s failed: %s\n",
+                                        filename, strerror(errno));
+                        exit(EX_SYSERR);
+                }
                 file_descript = open(filename, O_RDONLY);
                 if(file_descript < 0) {
@@ -380 +391 @@
                 return 1;
         data = *optionsp;
-
-        if(verboseflag)
-                printf("parsing options: %s\n", data);
 
         /* BB fixme check for separator override BB */
@@ -472 +480 @@
                         if (!value || !*value) {
                                 if(got_password) {
-                                        printf("\npassword specified twice, ignoring second\n");
+                                        fprintf(stderr, "\npassword specified twice, ignoring second\n");
                                 } else
                                         got_password = 1;
-                        } else if (strnlen(value, 17) < 17) {
-                                if(got_password)
-                                        printf("\nmount.cifs warning - password specified twice\n");
-                                got_password = 1;
+                        } else if (strnlen(value, MOUNT_PASSWD_SIZE) < MOUNT_PASSWD_SIZE) {
+                                if (got_password) {
+                                        fprintf(stderr, "\nmount.cifs warning - password specified twice\n");
+                                } else {
+                                        mountpassword = strndup(value, MOUNT_PASSWD_SIZE);
+                                        if (!mountpassword) {
+                                                fprintf(stderr, "mount.cifs error: %s", strerror(ENOMEM));
+                                                SAFE_FREE(out);
+                                                return 1;
+                                        }
+                                        got_password = 1;
+                                }
                         } else {
-                                printf("password too long\n");
+                                fprintf(stderr, "password too long\n");
                                 SAFE_FREE(out);
                                 return 1;
                         }
+                        goto nocopy;
                 } else if (strncmp(data, "sec", 3) == 0) {
                         if (value) {
@@ -1371 +1388 @@
                 }
         }
-        if(mountpassword) {
-                /* Commas have to be doubled, or else they will
-                look like the parameter separator */
-/*              if(sep is not set)*/
-                if(retry == 0)
-                        check_for_comma(&mountpassword);
-                strlcat(options,",pass=",options_size);
-                strlcat(options,mountpassword,options_size);
-        }
 
         strlcat(options,",ver=",options_size);
@@ -1392 +1400 @@
                 strlcat(options,prefixpath,options_size); /* no need to cat the / */
         }
-        if(verboseflag)
-                printf("\nmount.cifs kernel mount options %s \n",options);
 
         /* convert all '\\' to '/' in share portion so that /proc/mounts looks pretty */
@@ -1424 +1430 @@
                 }
         }
+
+        if(verboseflag)
+                fprintf(stderr, "\nmount.cifs kernel mount options: %s", options);
+
+        if (mountpassword) {
+                /*
+                 * Commas have to be doubled, or else they will
+                 * look like the parameter separator
+                 */
+                if(retry == 0)
+                        check_for_comma(&mountpassword);
+                strlcat(options,",pass=",options_size);
+                strlcat(options,mountpassword,options_size);
+                if (verboseflag)
+                        fprintf(stderr, ",pass=********");
+        }
+
+        if (verboseflag)
+                fprintf(stderr, "\n");
 
         if (!fakemnt && mount(dev_name, mountpoint, "cifs", flags, options)) {

branches/samba-3.0/source/include/smb.h

@@ -760 +760 @@
         struct timeval request_time; /* When was this first issued? */
         struct timeval end_time; /* When does this time out? */
+        bool processed;
         DATA_BLOB buf;
         DATA_BLOB private_data;

branches/samba-3.0/source/include/version.h

@@ -2 +2 @@
 #define SAMBA_VERSION_MAJOR 3
 #define SAMBA_VERSION_MINOR 0
-#define SAMBA_VERSION_RELEASE 36
-#define SAMBA_VERSION_OFFICIAL_STRING "3.0.36"
-#define SAMBA_VERSION_VENDOR_SUFFIX "eCS 1.0.2"
+#define SAMBA_VERSION_RELEASE 37
+#define SAMBA_VERSION_OFFICIAL_STRING "3.0.37"
+#define SAMBA_VERSION_VENDOR_SUFFIX "eCS 1.0.x-TEST"
+#define SAMBA_VERSION_VENDOR_PATCH 20091006
 #define SAMBA_VERSION_STRING samba_version_string()

branches/samba-3.0/source/param/loadparm.c

@@ -2699 +2699 @@
         pstring newHomedir;
 
+        if (pszHomename == NULL || user == NULL || pszHomedir == NULL ||
+                        pszHomedir[0] == '\0') {
+                return False;
+        }
+
         i = add_a_service(ServicePtrs[iDefaultService], pszHomename);
 
@@ -4179 +4184 @@
                         continue;
 
-                if (home && homes >= 0)
+                if (home && home[0] && homes >= 0)
                         lp_add_home(p, homes, p, home);
         }

branches/samba-3.0/source/passdb/pdb_tdb.c

@@ -823 +823 @@
         
         SMB_ASSERT( ref_count == 0 );
-        
+DEBUG(0, ("tdbsam_open file: %s size: %d \n", name, get_file_size( name ) ));   //remove me
         /* Try to open tdb passwd.  Create a new one if necessary */
         
@@ -883 +883 @@
 
         SMB_ASSERT(ref_count >= 0 );
-        
+/* remove later */
+        DEBUG(0, ("tdbsam_close file: %s size: %d \n", tdbsam_filename, get_file_size( tdbsam_filename ) ));    //remove me
+/* -- remove later */
         if ( ref_count == 0 ) {
                 tdb_close( tdbsam );

branches/samba-3.0/source/smbd/process.c

@@ -94 +94 @@
         msg->request_time = request_time;
         msg->end_time = end_time;
+        msg->processed = false;
 
         if (private_data) {
@@ -163 +164 @@
 
 /****************************************************************************
- Return true if this mid is on the deferred queue.
+ Return true if this mid is on the deferred queue and was not yet processed.
 ****************************************************************************/
 
@@ -171 +172 @@
 
         for (pml = deferred_open_queue; pml; pml = pml->next) {
-                if (SVAL(pml->buf.data,smb_mid) == mid) {
+                if (SVAL(pml->buf.data,smb_mid) == mid && !pml->processed) {
                         return True;
                 }
@@ -410 +411 @@
                            know this is a retry. */
                         DEBUG(5,("receive_message_or_smb: returning deferred open smb message.\n"));
+
+                        /* Mark the message as processed so this is not
+                         * re-processed in error. */
+                        msg->processed = true;
                         return True;
                 }
@@ -968 +973 @@
 
                         if (!change_to_user(conn,session_tag)) {
-                                remove_deferred_open_smb_message(
-                                        SVAL(inbuf, smb_mid));
                                 return(ERROR_NT(NT_STATUS_DOS(ERRSRV,ERRbaduid)));
                         }
@@ -1018 +1021 @@
 static int construct_reply(char *inbuf,char *outbuf,int size,int bufsize)
 {
+        struct pending_message_list *pml = NULL;
         int type = CVAL(inbuf,smb_com);
         int outsize = 0;
         int msg_type = CVAL(inbuf,0);
+        uint16_t mid = SVAL(inbuf, smb_mid);
 
         chain_size = 0;
@@ -1032 +1037 @@
 
         outsize = switch_message(type,inbuf,outbuf,size,bufsize);
+
+        /* If this was a deferred message and it's still there and
+         * was processed, remove it. */
+        pml = get_open_deferred_message(mid);
+        if (pml && pml->processed) {
+                remove_deferred_open_smb_message(mid);
+        }
 
         outsize += chain_size;

branches/samba-3.0/source/smbd/service.c

@@ -228 +228 @@
         int iHomeService;
 
-        if (!service || !homedir)
+        if (!service || !homedir || homedir[0] == '\0')
                 return -1;
 
@@ -805 +805 @@
                                       current_user_info.domain,
                                       s, sizeof(s));
+
+                if (s[0] == '\0') {
+                        DEBUG(6, ("service [%s] did not resolve to a path\n",
+                                lp_servicename(snum)));
+                        conn_free(conn);
+                        *status = NT_STATUS_BAD_NETWORK_NAME;
+                        return NULL;
+                }
+
                 set_conn_connectpath(conn,s);
                 DEBUG(3,("Connect path is '%s' for service [%s]\n",s,