diff options
| author | Volker Lendecke <vlendec@samba.org> | 2007-08-10 21:34:55 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 12:29:28 -0500 |
| commit | 23998e1da83c77c16ff4d33529b8dab38005b001 (patch) | |
| tree | f77741f14503e6287fe3529081eca6803e649ac2 | |
| parent | d465b468c1bd1e43fc1bf1622415ed98dafa6627 (diff) | |
| download | samba-23998e1da83c77c16ff4d33529b8dab38005b001.tar.gz samba-23998e1da83c77c16ff4d33529b8dab38005b001.tar.bz2 samba-23998e1da83c77c16ff4d33529b8dab38005b001.zip | |
r24320: Fix the wct checks in reply_trans2 and the reply_trans calls
No idea what I've been smoking here.
Thanks to Stefan for closely looking
(This used to be commit 708f5af2e8c10d9a0d0027e3c31fa23689e746b8)
| -rw-r--r-- | source3/smbd/ipc.c | 4 | ||||
| -rw-r--r-- | source3/smbd/trans2.c | 2 |
2 files changed, 3 insertions, 3 deletions
diff --git a/source3/smbd/ipc.c b/source3/smbd/ipc.c index b13c18a590..2403706929 100644 --- a/source3/smbd/ipc.c +++ b/source3/smbd/ipc.c @@ -488,7 +488,7 @@ void reply_trans(connection_struct *conn, struct smb_request *req) START_PROFILE(SMBtrans); - if (SVAL(req->inbuf, smb_wct) < 10) { + if (req->wct < 14) { reply_nterror(req, NT_STATUS_INVALID_PARAMETER); END_PROFILE(SMBtrans); return; @@ -667,7 +667,7 @@ void reply_transs(connection_struct *conn, struct smb_request *req) show_msg((char *)req->inbuf); - if (req->wct < 10) { + if (req->wct < 8) { reply_nterror(req, NT_STATUS_INVALID_PARAMETER); END_PROFILE(SMBtranss); return; diff --git a/source3/smbd/trans2.c b/source3/smbd/trans2.c index 26769e53d6..f65d833ab0 100644 --- a/source3/smbd/trans2.c +++ b/source3/smbd/trans2.c @@ -7028,7 +7028,7 @@ void reply_trans2(connection_struct *conn, struct smb_request *req) START_PROFILE(SMBtrans2); - if (req->wct < 8) { + if (req->wct < 14) { reply_nterror(req, NT_STATUS_INVALID_PARAMETER); END_PROFILE(SMBtrans2); return; |