mirror of
https://github.com/samba-team/samba.git
synced 2025-11-14 12:23:52 +03:00
r22852: merge fixes for CVE-2007-2446 and CVE-2007-2447 to all branches
This commit is contained in:
committed by
Gerald (Jerry) Carter
parent
34f77af02e
commit
f65214be68
@@ -230,6 +230,10 @@ static BOOL smb_io_notify_option_type_data(const char *desc, SPOOL_NOTIFY_OPTION
|
||||
if (type->count2 != type->count)
|
||||
DEBUG(4,("What a mess, count was %x now is %x !\n", type->count, type->count2));
|
||||
|
||||
if (type->count2 > MAX_NOTIFY_TYPE_FOR_NOW) {
|
||||
return False;
|
||||
}
|
||||
|
||||
/* parse the option type data */
|
||||
for(i=0;i<type->count2;i++)
|
||||
if(!prs_uint16("fields",ps,depth,&type->fields[i]))
|
||||
|
||||
Reference in New Issue
Block a user