From c6669677b1e9628e60c1ffb21a0e8c2516106c50 Mon Sep 17 00:00:00 2001
From: Volker Lendecke <vl@samba.org>
Date: Thu, 22 Mar 2012 12:16:17 +0100
Subject: s3-libsmb: Fix parsing a notify response

---
 source3/libsmb/clifile.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'source3/libsmb/clifile.c')

diff --git a/source3/libsmb/clifile.c b/source3/libsmb/clifile.c
index 3adc61559d..a25eb4636e 100644
--- a/source3/libsmb/clifile.c
+++ b/source3/libsmb/clifile.c
@@ -5028,7 +5028,7 @@ static void cli_notify_done(struct tevent_req *subreq)
 		ssize_t ret;
 		char *name;
 
-		if ((next != 0) && (len+12 != next)) {
+		if (trans_oob(num_params, ofs + 12, len)) {
 			TALLOC_FREE(params);
 			tevent_req_nterror(
 				req, NT_STATUS_INVALID_NETWORK_RESPONSE);
-- 
cgit