sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-08 21:18:16 +03:00
Code

s3-iremotewinspool: check for correct object_uuid in dispatch fn.

Browse Source 
Guenther

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Günther Deschner 2023-09-25 20:31:24 +02:00 committed by Andrew Bartlett
parent e6b07d4253
commit e05c83408f
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
source3/rpc_server/spoolss/srv_iremotewinspool.c
View File

@ -91,6 +91,25 @@ static NTSTATUS iremotewinspool__op_dispatch_internal(struct dcesrv_call_state *
struct pipes_struct *p = NULL;
NTSTATUS status = NT_STATUS_OK;
bool impersonated = false;
bool ok;
struct GUID object_uuid;
ok = dce_call->pkt.pfc_flags & DCERPC_PFC_FLAG_OBJECT_UUID;
if (!ok) {
dce_call->fault_code = DCERPC_NCA_S_UNSUPPORTED_TYPE;
return NT_STATUS_NET_WRITE_FAULT;
}
status = GUID_from_string(IREMOTEWINSPOOL_OBJECT_GUID, &object_uuid);
if (!NT_STATUS_IS_OK(status)) {
dce_call->fault_code = DCERPC_NCA_S_UNSUPPORTED_TYPE;
return NT_STATUS_NET_WRITE_FAULT;
}
if (!GUID_equal(&dce_call->pkt.u.request.object.object, &object_uuid)) {
dce_call->fault_code = DCERPC_NCA_S_UNSUPPORTED_TYPE;
return NT_STATUS_NET_WRITE_FAULT;
}
if (forward_opnum_to_spoolss(opnum)) {
return spoolss__op_dispatch(dce_call, mem_ctx, r);