diff options
| author | Jeremy Allison <jra@samba.org> | 2007-07-05 18:28:18 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 12:23:49 -0500 |
| commit | 35d09869edf09b2af394a3eea1ee7b9ef1ba696b (patch) | |
| tree | d36397488264dd2a3df01b9c65a185264549829a /source3/smbd/notify.c | |
| parent | 8724dfe55155eef0fb612e547ecf0ebaee89adf4 (diff) | |
| download | samba-35d09869edf09b2af394a3eea1ee7b9ef1ba696b.tar.gz samba-35d09869edf09b2af394a3eea1ee7b9ef1ba696b.tar.bz2 samba-35d09869edf09b2af394a3eea1ee7b9ef1ba696b.zip | |
r23728: First part of bugfix for #4763. Limit notify responses
to client max buf size.
Jeremy.
(This used to be commit 6113f56919a3cd7fd753808dbbe473603851bc3c)
Diffstat (limited to 'source3/smbd/notify.c')
| -rw-r--r-- | source3/smbd/notify.c | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/source3/smbd/notify.c b/source3/smbd/notify.c index 1b75916942..746a8f47e5 100644 --- a/source3/smbd/notify.c +++ b/source3/smbd/notify.c @@ -22,6 +22,9 @@ #include "includes.h" +/* Max size we can send to client in a notify response. */ +extern int max_send; + struct notify_change_request { struct notify_change_request *prev, *next; struct files_struct *fsp; /* backpointer for cancel by mid */ @@ -147,6 +150,15 @@ void change_notify_reply(const char *request_buf, buflen = smb_size+38+prs_offset(&ps) + 4 /* padding */; + if (buflen > max_send) { + /* + * We exceed what the client is willing to accept. Send + * nothing. + */ + change_notify_reply_packet(request_buf, NT_STATUS_OK); + goto done; + } + if (!(outbuf = SMB_MALLOC_ARRAY(char, buflen))) { change_notify_reply_packet(request_buf, NT_STATUS_NO_MEMORY); goto done; |