From 974cf7d7c9d82a85a5006f3b688198ae02f91e90 Mon Sep 17 00:00:00 2001
From: Jean-François Micouleau <jfm@samba.org>
Date: Wed, 5 Apr 2000 17:53:45 +0000
Subject: off by one error ...

	J.F.
(This used to be commit cef44398f90f670358f2ad430056371d394c7f91)
---
 source3/rpc_parse/parse_spoolss.c | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/source3/rpc_parse/parse_spoolss.c b/source3/rpc_parse/parse_spoolss.c
index 18e736e9af..fd053dbf45 100644
--- a/source3/rpc_parse/parse_spoolss.c
+++ b/source3/rpc_parse/parse_spoolss.c
@@ -2305,8 +2305,11 @@ uint32 spoolss_size_printer_driver_info_3(DRIVER_INFO_3 *info)
 	
 	for (i=0; (string[i]!=0x0000) || (string[i+1]!=0x0000); i++);
 
-	size+=2*i;
-	size+=6;
+	i=i+2; /* to count all chars including the leading zero */
+	i=2*i; /* because we need the value in bytes */
+	i=i+4; /* the offset pointer size */
+
+	size+=i;
 
 	return size;
 }
-- 
cgit