From 5f1f1e5e5c52ec8c453b5ea688f87004541cc5bd Mon Sep 17 00:00:00 2001
From: Andrew Tridgell <tridge@samba.org>
Date: Wed, 18 Aug 2004 20:07:44 +0000
Subject: r1896: stricter check on packet parsing for NBT session replies (This
 used to be commit 30ab38559e8c52ecdaf7ca9b124875ade82c5c66)

---
 source4/libcli/raw/clitransport.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/source4/libcli/raw/clitransport.c b/source4/libcli/raw/clitransport.c
index 03a0540be0..91f0f0f8f5 100644
--- a/source4/libcli/raw/clitransport.c
+++ b/source4/libcli/raw/clitransport.c
@@ -354,7 +354,7 @@ static void smbcli_transport_finish_recv(struct smbcli_transport *transport)
 	req->in.allocated = req->in.size;
 
 	/* handle NBT session replies */
-	if (req->in.buffer[0] != 0) {
+	if (req->in.size >= 4 && req->in.buffer[0] != 0) {
 		req->status = NT_STATUS_OK;
 		goto async;
 	}
-- 
cgit