summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIra Cooper <samba@ira.wakeful.net>2010-06-08 11:20:23 -0700
committerJeremy Allison <jra@samba.org>2010-06-08 11:20:23 -0700
commitfd9e02d5f3a2d98fe14b10b52c4ca3e654a6bd3e (patch)
tree1f5eebc2e037257ea5d27ddec2dccb8c8f6360a8
parentaeacb023b966dfe2943a5fa799a7b1bc4df4181c (diff)
downloadsamba-fd9e02d5f3a2d98fe14b10b52c4ca3e654a6bd3e.tar.gz
samba-fd9e02d5f3a2d98fe14b10b52c4ca3e654a6bd3e.tar.bz2
samba-fd9e02d5f3a2d98fe14b10b52c4ca3e654a6bd3e.zip
Fix for bug 7501 - SMB2: CREATE request replies getting mangled.
Code for dup_smb2_req() was duplicating the wrong vector (i, instead of i+2) when returning a non-minimal SMB2 response.
-rw-r--r--source3/smbd/smb2_server.c4
1 files changed, 1 insertions, 3 deletions
diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c
index df2557080b..009cc77e9f 100644
--- a/source3/smbd/smb2_server.c
+++ b/source3/smbd/smb2_server.c
@@ -551,9 +551,7 @@ static struct smbd_smb2_request *dup_smb2_req(const struct smbd_smb2_request *re
outvec[i+2].iov_base = ((uint8_t *)outvec[i].iov_base) +
(OUTVEC_ALLOC_SIZE - 1);
outvec[i+2].iov_len = 1;
- } else if (!dup_smb2_vec(outvec,
- req->out.vector,
- i)) {
+ } else if (!dup_smb2_vec(outvec, req->out.vector, i+2)) {
break;
}
}