sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Code

CVE-2015-5370: s4:rpc_server: split out a dcesrv_fault_with_flags() helper function

Browse Source 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
This commit is contained in:
Stefan Metzmacher 2015-06-26 08:10:46 +02:00
parent 5c76e84663
commit 254048f9a5
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
source4/rpc_server/common/reply.c
View File

@ -97,7 +97,9 @@ void dcesrv_init_hdr(struct ncacn_packet *pkt, bool bigendian)
/*
return a dcerpc fault
*/
NTSTATUS dcesrv_fault(struct dcesrv_call_state *call, uint32_t fault_code)
NTSTATUS dcesrv_fault_with_flags(struct dcesrv_call_state *call,
uint32_t fault_code,
uint8_t extra_flags)
{
struct ncacn_packet pkt;
struct data_blob_list_item *rep;
@ -109,7 +111,7 @@ NTSTATUS dcesrv_fault(struct dcesrv_call_state *call, uint32_t fault_code)
pkt.auth_length = 0;
pkt.call_id = call->pkt.call_id;
pkt.ptype = DCERPC_PKT_FAULT;
pkt.pfc_flags = DCERPC_PFC_FLAG_FIRST | DCERPC_PFC_FLAG_LAST;
pkt.pfc_flags = DCERPC_PFC_FLAG_FIRST | DCERPC_PFC_FLAG_LAST | extra_flags;
pkt.u.fault.alloc_hint = 24;
switch (call->pkt.ptype) {
case DCERPC_PKT_REQUEST:
@ -153,7 +155,10 @@ NTSTATUS dcesrv_fault(struct dcesrv_call_state *call, uint32_t fault_code)
return NT_STATUS_OK;
}
NTSTATUS dcesrv_fault(struct dcesrv_call_state *call, uint32_t fault_code)
{
return dcesrv_fault_with_flags(call, fault_code, 0);
}
_PUBLIC_ NTSTATUS dcesrv_reply(struct dcesrv_call_state *call)
{