sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-10 12:58:35 +03:00
Code

r3936: Ensure LARGE_READX response must fit within reply buffer.

Browse Source 
Jeremy.
(This used to be commit 5541001cf98aa9afb8f98ebeb91561348d3f5d74)
This commit is contained in:
Jeremy Allison 2004-11-24 05:24:38 +00:00 committed by Gerald (Jerry) Carter
parent 44b5067e32
commit 97bb32d61f
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
source3/smbd/reply.c
View File

@ -2186,6 +2186,12 @@ int reply_read_and_X(connection_struct *conn, char *inbuf,char *outbuf,int lengt
if (global_client_caps & CAP_LARGE_READX) {
smb_maxcnt |= ((((size_t)SVAL(inbuf,smb_vwv7)) & 1 )<<16);
if (smb_maxcnt > BUFFER_SIZE) {
DEBUG(0,("reply_read_and_X - read too large (%u) for reply buffer %u\n",
(unsigned int)smb_maxcnt, (unsigned int)BUFFER_SIZE));
END_PROFILE(SMBreadX);
return ERROR_NT(NT_STATUS_INVALID_PARAMETER);
}
}
if(CVAL(inbuf,smb_wct) == 12) {