diff options
| author | Jeremy Allison <jra@samba.org> | 2008-05-28 09:31:42 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2008-05-28 09:31:42 -0700 |
| commit | d36434f31268b75040311352f23c92c9a61e8cda (patch) | |
| tree | fc19fb649d4a6ecf29f43b872975c7f6eeaeebd3 /source3/client/client.c | |
| parent | 611072fc1cd94e6c9d56ce910fd13f007f6ecb84 (diff) | |
| download | samba-d36434f31268b75040311352f23c92c9a61e8cda.tar.gz samba-d36434f31268b75040311352f23c92c9a61e8cda.tar.bz2 samba-d36434f31268b75040311352f23c92c9a61e8cda.zip | |
Security fix for CVE-2008-1105: Boundary failure when parsing SMB responses
can result in a buffer overrun.
Jeremy.
(This used to be commit 23b825e9d2c74c5b940cf4d3aa56c18692259972)
Diffstat (limited to 'source3/client/client.c')
| -rw-r--r-- | source3/client/client.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source3/client/client.c b/source3/client/client.c index cc0da18d4d..8c939fc3ec 100644 --- a/source3/client/client.c +++ b/source3/client/client.c @@ -4382,7 +4382,7 @@ static void readline_callback(void) set_smb_read_error(&cli->smb_rw_error, SMB_READ_OK); - status = receive_smb_raw(cli->fd, cli->inbuf, 0, 0, &len); + status = receive_smb_raw(cli->fd, cli->inbuf, cli->bufsize, 0, 0, &len); if (!NT_STATUS_IS_OK(status)) { DEBUG(0, ("Read from server failed, maybe it closed " |