diff options
author | Luke Leighton <lkcl@samba.org> | 1997-10-12 14:17:55 +0000 |
---|---|---|
committer | Luke Leighton <lkcl@samba.org> | 1997-10-12 14:17:55 +0000 |
commit | 60575a888aebec898fdaf0f6c0c8269607b2571f (patch) | |
tree | b496d7a8986f5c1eb31395025d10ea4a91099219 /source3/lsaparse.c | |
parent | a26037ac7c1ac218863f9d674dcf85293eb2f085 (diff) | |
download | samba-60575a888aebec898fdaf0f6c0c8269607b2571f.tar.gz samba-60575a888aebec898fdaf0f6c0c8269607b2571f.tar.bz2 samba-60575a888aebec898fdaf0f6c0c8269607b2571f.zip |
ipc.c:
debugging info. found that data = NULL because of short packet length
indicated from the ntlsaRPC pipe _royally_ stuffs NT's packet handling.
maybe this should go down as a service denial bug to the ntbugtraq list.
pipes.c lsaparse.c smbparse.c :
added more debug stuff. added length of header to data_len in MSRPC
fragment_length field (0x18 bytes short) which caused the above bug
from NT 4.0. oops.
(This used to be commit a6f8de6815e0b85bb23b302980730501ac0b87e5)
Diffstat (limited to 'source3/lsaparse.c')
-rw-r--r-- | source3/lsaparse.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/source3/lsaparse.c b/source3/lsaparse.c index 462f621ece..ee73dd9a05 100644 --- a/source3/lsaparse.c +++ b/source3/lsaparse.c @@ -34,7 +34,7 @@ char* lsa_io_r_open_pol(BOOL io, LSA_R_OPEN_POL *r_p, char *q, char *base, int a DEBUG(5,("%slsa_io_r_open_pol\n", tab_depth(depth))); depth++; - q = smb_io_pol_hnd(io, &(r_p->pol), q, base, align); + q = smb_io_pol_hnd(io, &(r_p->pol), q, base, align, depth); DBG_RW_IVAL("status", depth, base, io, q, r_p->status); q += 4; @@ -51,7 +51,7 @@ char* lsa_io_q_query(BOOL io, LSA_Q_QUERY_INFO *q_q, char *q, char *base, int al DEBUG(5,("%s%04x lsa_io_q_query\n", tab_depth(depth), PTR_DIFF(q, base))); depth++; - q = smb_io_pol_hnd(io, &(q_q->pol), q, base, align); + q = smb_io_pol_hnd(io, &(q_q->pol), q, base, align, depth); DBG_RW_SVAL("info_class", depth, base, io, q, q_q->info_class); q += 2; @@ -113,7 +113,7 @@ char* lsa_io_q_lookup_sids(BOOL io, LSA_Q_LOOKUP_SIDS *q_s, char *q, char *base, q = align_offset(q, base, align); - q = smb_io_pol_hnd(io, &(q_s->pol_hnd), q, base, align); /* policy handle */ + q = smb_io_pol_hnd(io, &(q_s->pol_hnd), q, base, align, depth); /* policy handle */ DBG_RW_IVAL("num_entries", depth, base, io, q, q_s->num_entries); q += 4; DBG_RW_IVAL("buffer_dom_sid", depth, base, io, q, q_s->buffer_dom_sid); q += 4; /* undocumented domain SID buffer pointer */ @@ -182,7 +182,7 @@ char* lsa_io_q_lookup_rids(BOOL io, LSA_Q_LOOKUP_RIDS *q_r, char *q, char *base, q = align_offset(q, base, align); - q = smb_io_pol_hnd(io, &(q_r->pol_hnd), q, base, align); /* policy handle */ + q = smb_io_pol_hnd(io, &(q_r->pol_hnd), q, base, align, depth); /* policy handle */ DBG_RW_IVAL("num_entries", depth, base, io, q, q_r->num_entries); q += 4; DBG_RW_IVAL("num_entries2", depth, base, io, q, q_r->num_entries2); q += 4; |