sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-08-03 04:22:09 +03:00
Code Activity

smbd: Fix CID 1351215 Improper use of negative value

Browse Source 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>

Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Wed Feb  3 15:03:09 CET 2016 on sn-devel-144
This commit is contained in:
Volker Lendecke
2016-02-03 09:18:14 +01:00
committed by Michael Adam
parent f193361850
commit 2d80498e64
1 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
source3/smbd/smbXsrv_client.c
View File

@ -290,14 +290,20 @@ NTSTATUS smb2srv_client_connection_pass(struct smbd_smb2_request *smb2req,
NTSTATUS status; NTSTATUS status;
struct smbXsrv_connection_pass0 pass_info0; struct smbXsrv_connection_pass0 pass_info0;
struct smbXsrv_connection_passB pass_blob; struct smbXsrv_connection_passB pass_blob;
ssize_t reqlen;
struct iovec iov; struct iovec iov;
pass_info0.initial_connect_time = global->initial_connect_time; pass_info0.initial_connect_time = global->initial_connect_time;
pass_info0.client_guid = global->client_guid; pass_info0.client_guid = global->client_guid;
pass_info0.negotiate_request.length = iov_buflen(smb2req->in.vector,
smb2req->in.vector_count); reqlen = iov_buflen(smb2req->in.vector, smb2req->in.vector_count);
if (reqlen == -1) {
return NT_STATUS_INVALID_BUFFER_SIZE;
}
pass_info0.negotiate_request.length = reqlen;
pass_info0.negotiate_request.data = talloc_array(talloc_tos(), uint8_t, pass_info0.negotiate_request.data = talloc_array(talloc_tos(), uint8_t,
pass_info0.negotiate_request.length); reqlen);
if (pass_info0.negotiate_request.data == NULL) { if (pass_info0.negotiate_request.data == NULL) {
return NT_STATUS_NO_MEMORY; return NT_STATUS_NO_MEMORY;
} }