sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Code

s4:rpc_server: check header of each packet fragment

Browse Source 
Signed-off-by: Gregor Beck <gbeck@sernet.de>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
This commit is contained in:
Gregor Beck 2014-01-09 09:47:25 +01:00 committed by Günther Deschner
parent 7676bf32a4
commit b58f06c17b
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
source4/rpc_server/dcerpc_server.c
View File

@ -1041,7 +1041,19 @@ NTSTATUS dcesrv_process_ncacn_packet(struct dcesrv_connection *dce_conn,
if (call->pkt.ptype != call2->pkt.ptype) {
/* trying to play silly buggers are we? */
return dcesrv_fault(call2, DCERPC_FAULT_OTHER);
return dcesrv_fault(call2, DCERPC_NCA_S_PROTO_ERROR);
}
if (memcmp(call->pkt.drep, call2->pkt.drep, sizeof(pkt->drep)) != 0) {
return dcesrv_fault(call2, DCERPC_NCA_S_PROTO_ERROR);
}
if (call->pkt.call_id != call2->pkt.call_id) {
return dcesrv_fault(call2, DCERPC_NCA_S_PROTO_ERROR);
}
if (call->pkt.u.request.context_id != call2->pkt.u.request.context_id) {
return dcesrv_fault(call2, DCERPC_NCA_S_PROTO_ERROR);
}
if (call->pkt.u.request.opnum != call2->pkt.u.request.opnum) {
return dcesrv_fault(call2, DCERPC_NCA_S_PROTO_ERROR);
}
alloc_size = call->pkt.u.request.stub_and_verifier.length +