diff options
| author | Jeremy Allison <jra@samba.org> | 2004-11-10 20:37:14 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 10:53:12 -0500 |
| commit | 17c8907d9c2a89a1f3d271aa58a5d4494a0d4653 (patch) | |
| tree | afb747c1612332dc571e86d48bde781b6e20c8ff /source3/smbd/nttrans.c | |
| parent | 70696e4c1c6ac475c8feafdf22cf799b2ea16ec8 (diff) | |
| download | samba-17c8907d9c2a89a1f3d271aa58a5d4494a0d4653.tar.gz samba-17c8907d9c2a89a1f3d271aa58a5d4494a0d4653.tar.bz2 samba-17c8907d9c2a89a1f3d271aa58a5d4494a0d4653.zip | |
r3666: Generalise fix for trans and nttrans multi-fragment requests.
Jeremy
(This used to be commit 10b2489e3b2345a8532098523ebcebb73665a76f)
Diffstat (limited to 'source3/smbd/nttrans.c')
| -rw-r--r-- | source3/smbd/nttrans.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/source3/smbd/nttrans.c b/source3/smbd/nttrans.c index eaaf68d689..e20e433abc 100644 --- a/source3/smbd/nttrans.c +++ b/source3/smbd/nttrans.c @@ -2825,7 +2825,7 @@ due to being in oplock break state.\n", (unsigned int)function_code )); } if (parameter_count) { - if (parameter_displacement + parameter_count >= total_parameter_count) + if (parameter_displacement + parameter_count > total_parameter_count) goto bad_param; if ((parameter_displacement + parameter_count < parameter_displacement) || (parameter_displacement + parameter_count < parameter_count)) @@ -2842,7 +2842,7 @@ due to being in oplock break state.\n", (unsigned int)function_code )); } if (data_count) { - if (data_displacement + data_count >= total_data_count) + if (data_displacement + data_count > total_data_count) goto bad_param; if ((data_displacement + data_count < data_displacement) || (data_displacement + data_count < data_count)) |