summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorVolker Lendecke <vlendec@samba.org>2007-08-10 21:34:55 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 12:29:28 -0500
commit23998e1da83c77c16ff4d33529b8dab38005b001 (patch)
treef77741f14503e6287fe3529081eca6803e649ac2
parentd465b468c1bd1e43fc1bf1622415ed98dafa6627 (diff)
downloadsamba-23998e1da83c77c16ff4d33529b8dab38005b001.tar.gz
samba-23998e1da83c77c16ff4d33529b8dab38005b001.tar.bz2
samba-23998e1da83c77c16ff4d33529b8dab38005b001.zip
r24320: Fix the wct checks in reply_trans2 and the reply_trans calls
No idea what I've been smoking here. Thanks to Stefan for closely looking (This used to be commit 708f5af2e8c10d9a0d0027e3c31fa23689e746b8)
-rw-r--r--source3/smbd/ipc.c4
-rw-r--r--source3/smbd/trans2.c2
2 files changed, 3 insertions, 3 deletions
diff --git a/source3/smbd/ipc.c b/source3/smbd/ipc.c
index b13c18a590..2403706929 100644
--- a/source3/smbd/ipc.c
+++ b/source3/smbd/ipc.c
@@ -488,7 +488,7 @@ void reply_trans(connection_struct *conn, struct smb_request *req)
START_PROFILE(SMBtrans);
- if (SVAL(req->inbuf, smb_wct) < 10) {
+ if (req->wct < 14) {
reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
END_PROFILE(SMBtrans);
return;
@@ -667,7 +667,7 @@ void reply_transs(connection_struct *conn, struct smb_request *req)
show_msg((char *)req->inbuf);
- if (req->wct < 10) {
+ if (req->wct < 8) {
reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
END_PROFILE(SMBtranss);
return;
diff --git a/source3/smbd/trans2.c b/source3/smbd/trans2.c
index 26769e53d6..f65d833ab0 100644
--- a/source3/smbd/trans2.c
+++ b/source3/smbd/trans2.c
@@ -7028,7 +7028,7 @@ void reply_trans2(connection_struct *conn, struct smb_request *req)
START_PROFILE(SMBtrans2);
- if (req->wct < 8) {
+ if (req->wct < 14) {
reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
END_PROFILE(SMBtrans2);
return;