summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorVolker Lendecke <vl@samba.org>2010-01-09 20:22:00 +0100
committerVolker Lendecke <vl@samba.org>2010-01-09 20:37:39 +0100
commit43c841b6bd92e987109df81b6b8a2b85f21b0181 (patch)
treec53a1c7a359f2a571ab8d0c34f668485dbc734c3
parentc03a101e6d410df68454f46c9e4d88f46fc2fa1a (diff)
downloadsamba-43c841b6bd92e987109df81b6b8a2b85f21b0181.tar.gz
samba-43c841b6bd92e987109df81b6b8a2b85f21b0181.tar.bz2
samba-43c841b6bd92e987109df81b6b8a2b85f21b0181.zip
s3: Fix a segfault in winbindd_dual_ccache_ntlm_auth()
ntlmssp_update allocates the reply_blob as a child of ntlmssp_state. This means with ntlmss_end() it will be gone. winbindd_dual_ccache_ntlm_auth used the blob after the ntlmssp_end().
-rw-r--r--source3/winbindd/winbindd_ccache_access.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/source3/winbindd/winbindd_ccache_access.c b/source3/winbindd/winbindd_ccache_access.c
index 921110a0be..2f71aaae52 100644
--- a/source3/winbindd/winbindd_ccache_access.c
+++ b/source3/winbindd/winbindd_ccache_access.c
@@ -116,7 +116,7 @@ static NTSTATUS do_ntlm_auth_with_hashes(const char *username,
data_blob_free(&reply);
goto done;
}
- *auth_msg = reply;
+ *auth_msg = data_blob(reply.data, reply.length);
status = NT_STATUS_OK;
done: