diff options
| author | Volker Lendecke <vl@samba.org> | 2010-03-14 21:18:34 +0100 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2010-03-15 16:01:48 -0700 |
| commit | 3b736987153da48918229ab940f8ac89017ae79f (patch) | |
| tree | 4e47f40162a0e72b8b3569c6206a6f8f8c93adb5 /source3 | |
| parent | c35c38075c96fddd0dcd41b4173ca47a9c07df92 (diff) | |
| download | samba-3b736987153da48918229ab940f8ac89017ae79f.tar.gz samba-3b736987153da48918229ab940f8ac89017ae79f.tar.bz2 samba-3b736987153da48918229ab940f8ac89017ae79f.zip | |
s3: Fix an uninitialized variable read
Found by Laurent Gaffie <laurent.gaffie@gmail.com>
Thanks for that,
Volker
Diffstat (limited to 'source3')
| -rw-r--r-- | source3/smbd/sesssetup.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c index cad2dd33b8..8c0317ae9e 100644 --- a/source3/smbd/sesssetup.c +++ b/source3/smbd/sesssetup.c @@ -1214,7 +1214,7 @@ static void reply_sesssetup_and_X_spnego(struct smb_request *req) file_save("negotiate.dat", blob1.data, blob1.length); #endif - p2 = (char *)req->buf + data_blob_len; + p2 = (char *)req->buf + blob1.length; p2 += srvstr_pull_req_talloc(talloc_tos(), req, &tmp, p2, STR_TERMINATE); |