diff options
| author | Luke Leighton <lkcl@samba.org> | 1998-10-27 15:03:47 +0000 |
|---|---|---|
| committer | Luke Leighton <lkcl@samba.org> | 1998-10-27 15:03:47 +0000 |
| commit | 528c3d3e682ce85d8b041a1396e59f5229716e71 (patch) | |
| tree | 6cf77109368d04a74e1bc381a0b4edfbf86da8dd /source3/rpc_parse/parse_samr.c | |
| parent | 03893a1ab9f87965746fa3255c35337e0dabd8ae (diff) | |
| download | samba-528c3d3e682ce85d8b041a1396e59f5229716e71.tar.gz samba-528c3d3e682ce85d8b041a1396e59f5229716e71.tar.bz2 samba-528c3d3e682ce85d8b041a1396e59f5229716e71.zip | |
amazing. the improvements to NT continue, evidence for which shows up
now as "RPC fault" if the UNIHDR structure lengths do not exactly
match up to the length of the data stream.
so, all versions of samba prior to this one have an off-by-one bug
in unicode string lengths.
all versions of NT prior to NT 5 beta 2 could possibly have buffer
problems when receiving badly formatted UNICODE strings.
(This used to be commit 161eb6f511e161b63c1fa90a08c562fcf208344a)
Diffstat (limited to 'source3/rpc_parse/parse_samr.c')
| -rw-r--r-- | source3/rpc_parse/parse_samr.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source3/rpc_parse/parse_samr.c b/source3/rpc_parse/parse_samr.c index f09af387e4..ba6a8d3556 100644 --- a/source3/rpc_parse/parse_samr.c +++ b/source3/rpc_parse/parse_samr.c @@ -2694,7 +2694,7 @@ void make_samr_q_connect(SAMR_Q_CONNECT *q_u, /* make PDC server name \\server */ q_u->ptr_srv_name = len_srv_name > 0 ? 1 : 0; - make_unistr2(&(q_u->uni_srv_name), srv_name, len_srv_name); + make_unistr2(&(q_u->uni_srv_name), srv_name, len_srv_name+1); /* example values: 0x0000 0002 */ q_u->unknown_0 = unknown_0; |