summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Tridgell <tridge@samba.org>2006-09-10 11:32:31 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 14:18:10 -0500
commitf6d98fe853074d7c4fba1bef3bf5dbbad98bf879 (patch)
tree3e2712545d04196b7dd700b83fcf23f24371f3ca
parentbcabebf5028d5a3c020479a03e92df13dab8d9c8 (diff)
downloadsamba-f6d98fe853074d7c4fba1bef3bf5dbbad98bf879.tar.gz
samba-f6d98fe853074d7c4fba1bef3bf5dbbad98bf879.tar.bz2
samba-f6d98fe853074d7c4fba1bef3bf5dbbad98bf879.zip
r18330: don't mix pointer types in RPC replies
(This used to be commit cc86719f53a47e3ca25b19d7a765314ce967ab01)
-rw-r--r--source4/rpc_server/winreg/rpc_winreg.c6
1 files changed, 5 insertions, 1 deletions
diff --git a/source4/rpc_server/winreg/rpc_winreg.c b/source4/rpc_server/winreg/rpc_winreg.c
index 4dc07b9dc1..17e711e235 100644
--- a/source4/rpc_server/winreg/rpc_winreg.c
+++ b/source4/rpc_server/winreg/rpc_winreg.c
@@ -399,7 +399,11 @@ static WERROR winreg_QueryValue(struct dcesrv_call_state *dce_call, TALLOC_CTX *
/* Just asking for the size of the buffer */
r->out.type = (enum winreg_Type *)&val->data_type;
- r->out.length = &val->data.length;
+ r->out.length = talloc(mem_ctx, uint32_t);
+ if (!r->out.length) {
+ return WERR_NOMEM;
+ }
+ *r->out.length = val->data.length;
if (!r->in.data) {
r->out.size = talloc(mem_ctx, uint32_t);
*r->out.size = val->data.length;