diff options
| author | Günther Deschner <gd@samba.org> | 2010-08-02 15:52:09 +0200 |
|---|---|---|
| committer | Günther Deschner <gd@samba.org> | 2010-08-02 15:52:09 +0200 |
| commit | 45952b56797982d27731b20d97f5648c9414814a (patch) | |
| tree | 336f4bff5cf1cd99d0743954789daccd26247019 | |
| parent | ff1c5b37f619ed3373b65af72c026a36de4b94c9 (diff) | |
| download | samba-45952b56797982d27731b20d97f5648c9414814a.tar.gz samba-45952b56797982d27731b20d97f5648c9414814a.tar.bz2 samba-45952b56797982d27731b20d97f5648c9414814a.zip | |
spoolss: fix potential crash bug in spoolss_PrinterEnumValues push path.
Guenther
| -rw-r--r-- | librpc/idl/spoolss.idl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/librpc/idl/spoolss.idl b/librpc/idl/spoolss.idl index 028015b696..c61cba511c 100644 --- a/librpc/idl/spoolss.idl +++ b/librpc/idl/spoolss.idl @@ -2855,7 +2855,7 @@ cpp_quote("#define spoolss_security_descriptor security_descriptor") [value(2*strlen_m_term(value_name))] uint32 value_name_len; winreg_Type type; [relative,subcontext(0),subcontext_size(data_length),flag(NDR_REMAINING)] DATA_BLOB *data; - [value(data->length)] uint32 data_length; + [value(data ? data->length : 0)] uint32 data_length; } spoolss_PrinterEnumValues; [public,noopnum,noprint] WERROR _spoolss_EnumPrinterDataEx( |