diff options
author | Andrew Tridgell <tridge@samba.org> | 1998-09-01 01:10:01 +0000 |
---|---|---|
committer | Andrew Tridgell <tridge@samba.org> | 1998-09-01 01:10:01 +0000 |
commit | a5f8955ccb875f8467a83c241abf2e58c2bb96f4 (patch) | |
tree | 41737eca1403f66c5fdad29a0e7efb439c192c5a /source3/smbd/open.c | |
parent | 693480af8bb2d3e83566af9463ca427f47a879da (diff) | |
download | samba-a5f8955ccb875f8467a83c241abf2e58c2bb96f4.tar.gz samba-a5f8955ccb875f8467a83c241abf2e58c2bb96f4.tar.bz2 samba-a5f8955ccb875f8467a83c241abf2e58c2bb96f4.zip |
check that a valid pipe is passed before doing a pipe close.
I made this change after getting a segv in reply_pipe_close(). The
funny thing was that pipes_open was 1 and Pipes was NULL. That "can't
happen" and suggests that we have a wild pointer somewhere.
I suspect the rpc code, as I was playing with long share names (a
share called "averylongusername") at the time and the logs show lots
of srvsvc operations. I bet there is a buffer in the rpc code
somewhere that is overflowing and trashing bits of the data segment.
(This used to be commit 9fee8c2eb7bd05431cd9bcfbed3804c8ca1ee593)
Diffstat (limited to 'source3/smbd/open.c')
0 files changed, 0 insertions, 0 deletions