sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-04 16:58:42 +03:00
Code

Add additional copychunk checks.

Browse Source 
For printer, ipc$ connections, and directory handles.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: David Disseldorp <ddiss@samba.org>
This commit is contained in:
Jeremy Allison 2013-01-16 12:58:17 -08:00 committed by David Disseldorp
parent d6e10f0066
commit d562e9006a
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
source3/smbd/smb2_ioctl_network_fs.c
View File

@ -200,6 +200,28 @@ static NTSTATUS copychunk_check_handles(struct files_struct *src_fsp,
return NT_STATUS_ACCESS_DENIED; return NT_STATUS_ACCESS_DENIED;
} }
if (src_fsp->is_directory) {
DEBUG(5, ("copy chunk no read on src directory handle (%s).\n",
smb_fname_str_dbg(src_fsp->fsp_name) ));
return NT_STATUS_ACCESS_DENIED;
}
if (dst_fsp->is_directory) {
DEBUG(5, ("copy chunk no read on dst directory handle (%s).\n",
smb_fname_str_dbg(dst_fsp->fsp_name) ));
return NT_STATUS_ACCESS_DENIED;
}
if (IS_IPC(src_fsp->conn) || IS_IPC(dst_fsp->conn)) {
DEBUG(5, ("copy chunk no access on IPC$ handle.\n"));
return NT_STATUS_ACCESS_DENIED;
}
if (IS_PRINT(src_fsp->conn) || IS_PRINT(dst_fsp->conn)) {
DEBUG(5, ("copy chunk no access on PRINT handle.\n"));
return NT_STATUS_ACCESS_DENIED;
}
return NT_STATUS_OK; return NT_STATUS_OK;
} }