diff options
| author | Jeremy Allison <jra@samba.org> | 2011-06-28 17:45:49 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2011-06-29 04:37:28 +0200 |
| commit | 1fffddb2386e5c220d022da7e7a0b1baf410ce09 (patch) | |
| tree | be4e30ab5201a564c9494b08718283d41937f210 | |
| parent | e63d5d2cd56cda2a01aace7c93dcae18dc80df5c (diff) | |
| download | samba-1fffddb2386e5c220d022da7e7a0b1baf410ce09.tar.gz samba-1fffddb2386e5c220d022da7e7a0b1baf410ce09.tar.bz2 samba-1fffddb2386e5c220d022da7e7a0b1baf410ce09.zip | |
Fix bug #8219 - SMB Panic from Windows 7 Client
Caused by referencing an uninitialized variable in the
duplicated struct smbd_smb2_request when sending a signed
intermediate reply.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed Jun 29 04:37:28 CEST 2011 on sn-devel-104
| -rw-r--r-- | source3/smbd/smb2_server.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c index 65bb5b9eb0..24953edb5e 100644 --- a/source3/smbd/smb2_server.c +++ b/source3/smbd/smb2_server.c @@ -665,10 +665,18 @@ static struct smbd_smb2_request *dup_smb2_req(const struct smbd_smb2_request *re } newreq->sconn = req->sconn; + newreq->session = req->session; newreq->do_signing = req->do_signing; newreq->current_idx = req->current_idx; newreq->async = false; newreq->cancelled = false; + /* Note we are leaving: + ->tcon + ->smb1req + ->compat_chain_fsp + uninitialized as NULL here as + they're not used in the interim + response code. JRA. */ outvec = talloc_zero_array(newreq, struct iovec, count); if (!outvec) { |