sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
Code

Fix bug #9214 - Bad user supplied SMB2 credit value can cause smbd to call smb_panic.

Browse Source 
Terminate the connection cleanly instead.
This commit is contained in:
Jeremy Allison 2012-10-02 17:30:54 -07:00
parent 3983515a0d
commit c2f5b2466b
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
source3/smbd/smb2_server.c
View File

@ -780,7 +780,12 @@ static void smb2_set_operation_credit(struct smbd_server_connection *sconn,
out_status = NT_STATUS(IVAL(outhdr, SMB2_HDR_STATUS));
SMB_ASSERT(sconn->smb2.max_credits >= sconn->smb2.credits_granted);
SMB_ASSERT(sconn->smb2.max_credits >= credit_charge);
if (sconn->smb2.max_credits < credit_charge) {
smbd_server_connection_terminate(sconn,
"client error: credit charge > max credits\n");
return;
}
if (out_flags & SMB2_HDR_FLAG_ASYNC) {
/*