samba: fix some security problems

[openwrt.git] / package / network / services / samba36 / patches / 120-add_missing_ifdef.patch

diff --git a/package/network/services/samba36/patches/120-add_missing_ifdef.patch b/package/network/services/samba36/patches/120-add_missing_ifdef.patch
index dbd9adc..3c0ef8a 100644 (file)
--- a/package/network/services/samba36/patches/120-add_missing_ifdef.patch
+++ b/package/network/services/samba36/patches/120-add_missing_ifdef.patch
@@ -24,3 +24,18 @@
        epmapper_commands,
        shutdown_commands,
        test_commands,
+--- a/source3/rpc_server/srv_pipe.c
++++ b/source3/rpc_server/srv_pipe.c
+@@ -433,10 +433,12 @@ static bool check_bind_req(struct pipes_
+       if (ok) {
+               context_fns->allow_connect = true;
+       }
++#ifdef DEVELOPER
+       ok = ndr_syntax_id_equal(abstract, &ndr_table_rpcecho.syntax_id);
+       if (ok) {
+               context_fns->allow_connect = true;
+       }
++#endif
+       /*
+        * every interface can be modified to allow "connect" auth_level by
+        * using a parametric option like: