diff options
| author | Ira Cooper <samba@ira.wakeful.net> | 2010-06-08 11:20:23 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2010-06-08 11:20:23 -0700 |
| commit | fd9e02d5f3a2d98fe14b10b52c4ca3e654a6bd3e (patch) | |
| tree | 1f5eebc2e037257ea5d27ddec2dccb8c8f6360a8 /source3 | |
| parent | aeacb023b966dfe2943a5fa799a7b1bc4df4181c (diff) | |
| download | samba-fd9e02d5f3a2d98fe14b10b52c4ca3e654a6bd3e.tar.gz samba-fd9e02d5f3a2d98fe14b10b52c4ca3e654a6bd3e.tar.bz2 samba-fd9e02d5f3a2d98fe14b10b52c4ca3e654a6bd3e.zip | |
Fix for bug 7501 - SMB2: CREATE request replies getting mangled.
Code for dup_smb2_req() was duplicating the wrong vector (i, instead
of i+2) when returning a non-minimal SMB2 response.
Diffstat (limited to 'source3')
| -rw-r--r-- | source3/smbd/smb2_server.c | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c index df2557080b..009cc77e9f 100644 --- a/source3/smbd/smb2_server.c +++ b/source3/smbd/smb2_server.c @@ -551,9 +551,7 @@ static struct smbd_smb2_request *dup_smb2_req(const struct smbd_smb2_request *re outvec[i+2].iov_base = ((uint8_t *)outvec[i].iov_base) + (OUTVEC_ALLOC_SIZE - 1); outvec[i+2].iov_len = 1; - } else if (!dup_smb2_vec(outvec, - req->out.vector, - i)) { + } else if (!dup_smb2_vec(outvec, req->out.vector, i+2)) { break; } } |