sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-20 14:03:59 +03:00
Code

Fix buggy data_len calculation in echo. Add paranoia debug message.

Browse Source 
Jeremy.
This commit is contained in:
Jeremy Allison -
parent 63a82debd8
commit 5332af1124
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
source/smbd/reply.c
View File

@ -2784,7 +2784,11 @@ int reply_echo(connection_struct *conn,
int outsize = set_message(outbuf,1,data_len,True);
START_PROFILE(SMBecho);
data_len = MIN(data_len, (sizeof(inbuf)-(smb_buf(inbuf)-inbuf)));
if (data_len > BUFFER_SIZE) {
DEBUG(0,("reply_echo: data_len too large.\n"));
END_PROFILE(SMBecho);
return -1;
}
/* copy any incoming data back out */
if (data_len > 0)