diff options
| author | Rusty Russell <rusty@rustorp.com.au> | 2010-06-10 13:27:51 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2010-06-10 13:27:51 -0700 |
| commit | b53f8c187de8c8aff5989e4a0a460970f89b9011 (patch) | |
| tree | 7f0fa2500047f31199931a23c10328ea6d859b2e /source3/smbd/conn.c | |
| parent | 321d7a6303b651cc2533f4b72dc7cef6b7d64da4 (diff) | |
| download | samba-b53f8c187de8c8aff5989e4a0a460970f89b9011.tar.gz samba-b53f8c187de8c8aff5989e4a0a460970f89b9011.tar.bz2 samba-b53f8c187de8c8aff5989e4a0a460970f89b9011.zip | |
Since idtree assigns sequentially, it rarely reaches high numbers.
But such numbers can be forced with idr_get_new_above(), and that
reveals two bugs:
1) Crash in sub_remove() caused by pa array being too short.
2) Shift by more than 32 in _idr_find(), which is undefined, causing
the "outside the current tree" optimization to misfire and return NULL.
Diffstat (limited to 'source3/smbd/conn.c')
0 files changed, 0 insertions, 0 deletions