mirror of
https://github.com/samba-team/samba.git
synced 2025-02-04 17:47:26 +03:00
b4c3f72d44
After converting the rpc infratructure to talloc, read_from_internal_pipe freed the outdata too early. If the last fragment was read in two pieces (as rpcclient does it), all the outdata was freed during the read of the first piece of the read of the last fragment. Later read&x calls, trying to read the rest of the last fragment stepped into p->out_data.frag with non-zero offset when this was already freed.