summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGünther Deschner <gd@samba.org>2010-08-02 15:52:09 +0200
committerGünther Deschner <gd@samba.org>2010-08-02 15:52:09 +0200
commit45952b56797982d27731b20d97f5648c9414814a (patch)
tree336f4bff5cf1cd99d0743954789daccd26247019
parentff1c5b37f619ed3373b65af72c026a36de4b94c9 (diff)
downloadsamba-45952b56797982d27731b20d97f5648c9414814a.tar.gz
samba-45952b56797982d27731b20d97f5648c9414814a.tar.bz2
samba-45952b56797982d27731b20d97f5648c9414814a.zip
spoolss: fix potential crash bug in spoolss_PrinterEnumValues push path.
Guenther
-rw-r--r--librpc/idl/spoolss.idl2
1 files changed, 1 insertions, 1 deletions
diff --git a/librpc/idl/spoolss.idl b/librpc/idl/spoolss.idl
index 028015b696..c61cba511c 100644
--- a/librpc/idl/spoolss.idl
+++ b/librpc/idl/spoolss.idl
@@ -2855,7 +2855,7 @@ cpp_quote("#define spoolss_security_descriptor security_descriptor")
[value(2*strlen_m_term(value_name))] uint32 value_name_len;
winreg_Type type;
[relative,subcontext(0),subcontext_size(data_length),flag(NDR_REMAINING)] DATA_BLOB *data;
- [value(data->length)] uint32 data_length;
+ [value(data ? data->length : 0)] uint32 data_length;
} spoolss_PrinterEnumValues;
[public,noopnum,noprint] WERROR _spoolss_EnumPrinterDataEx(