summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2011-06-28 17:45:49 -0700
committerJeremy Allison <jra@samba.org>2011-06-29 04:37:28 +0200
commit1fffddb2386e5c220d022da7e7a0b1baf410ce09 (patch)
treebe4e30ab5201a564c9494b08718283d41937f210
parente63d5d2cd56cda2a01aace7c93dcae18dc80df5c (diff)
downloadsamba-1fffddb2386e5c220d022da7e7a0b1baf410ce09.tar.gz
samba-1fffddb2386e5c220d022da7e7a0b1baf410ce09.tar.bz2
samba-1fffddb2386e5c220d022da7e7a0b1baf410ce09.zip
Fix bug #8219 - SMB Panic from Windows 7 Client
Caused by referencing an uninitialized variable in the duplicated struct smbd_smb2_request when sending a signed intermediate reply. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Jun 29 04:37:28 CEST 2011 on sn-devel-104
-rw-r--r--source3/smbd/smb2_server.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c
index 65bb5b9eb0..24953edb5e 100644
--- a/source3/smbd/smb2_server.c
+++ b/source3/smbd/smb2_server.c
@@ -665,10 +665,18 @@ static struct smbd_smb2_request *dup_smb2_req(const struct smbd_smb2_request *re
}
newreq->sconn = req->sconn;
+ newreq->session = req->session;
newreq->do_signing = req->do_signing;
newreq->current_idx = req->current_idx;
newreq->async = false;
newreq->cancelled = false;
+ /* Note we are leaving:
+ ->tcon
+ ->smb1req
+ ->compat_chain_fsp
+ uninitialized as NULL here as
+ they're not used in the interim
+ response code. JRA. */
outvec = talloc_zero_array(newreq, struct iovec, count);
if (!outvec) {