c2efdf022e
It fixes CVE-2026-67289, CVE-2026-67299 and CVE-2026-68580. Resolves: RHEL-222792, RHEL-222965, RHEL-223607 Co-authored-by: Ondrej Holy <oholy@redhat.com>
35 lines
1.5 KiB
Diff
35 lines
1.5 KiB
Diff
From cef38c3063c8f5d6d62bdfff3234b6499cb4c589 Mon Sep 17 00:00:00 2001
|
|
From: Armin Novak <armin.novak@thincast.com>
|
|
Date: Tue, 14 Jul 2026 12:30:27 +0200
|
|
Subject: [PATCH] [core,redirection] relax checks
|
|
|
|
* TsvUrl is opaque, do not assume any format
|
|
* LoadBalanceInfo is opaque, do not assume any format
|
|
---
|
|
libfreerdp/core/redirection.c | 5 -----
|
|
1 file changed, 5 deletions(-)
|
|
|
|
diff --git a/libfreerdp/core/redirection.c b/libfreerdp/core/redirection.c
|
|
index c30bce904..9aaab65ec 100644
|
|
--- a/libfreerdp/core/redirection.c
|
|
+++ b/libfreerdp/core/redirection.c
|
|
@@ -722,9 +722,6 @@ static state_run_t rdp_recv_server_redirection_pdu(rdpRdp* rdp, wStream* s)
|
|
if (!rdp_redirection_read_data(LB_LOAD_BALANCE_INFO, s, &redirection->LoadBalanceInfoLength,
|
|
&redirection->LoadBalanceInfo))
|
|
return STATE_RUN_FAILED;
|
|
- if (!winpr_str_is_valid_urlN((const char*)redirection->LoadBalanceInfo,
|
|
- redirection->LoadBalanceInfoLength))
|
|
- return STATE_RUN_FAILED;
|
|
}
|
|
|
|
if (redirection->flags & LB_USERNAME)
|
|
@@ -818,8 +815,6 @@ static state_run_t rdp_recv_server_redirection_pdu(rdpRdp* rdp, wStream* s)
|
|
if (!rdp_redirection_read_data(LB_CLIENT_TSV_URL, s, &redirection->TsvUrlLength,
|
|
&redirection->TsvUrl))
|
|
return STATE_RUN_FAILED;
|
|
- if (!winpr_str_is_valid_urlN((const char*)redirection->TsvUrl, redirection->TsvUrlLength))
|
|
- return STATE_RUN_FAILED;
|
|
}
|
|
|
|
if (redirection->flags & LB_REDIRECTION_GUID)
|