From a7e07d149d76a4d62aba6801ac648c0c72999ea9 Mon Sep 17 00:00:00 2001
From: Jeremy Allison <jra@samba.org>
Date: Tue, 24 Apr 2001 23:51:57 +0000
Subject: Fix bad length in dgram. Jeremy. (This used to be commit
 8bd27845f0d8b19409ba79c028ce54732d7276e1)

---
 source3/nmbd/nmbd_packets.c | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'source3/nmbd')

diff --git a/source3/nmbd/nmbd_packets.c b/source3/nmbd/nmbd_packets.c
index 142268b0b0..3fa382b96f 100644
--- a/source3/nmbd/nmbd_packets.c
+++ b/source3/nmbd/nmbd_packets.c
@@ -1273,6 +1273,13 @@ an error packet of type %x\n",
   if (len <= 0)
     return;
 
+  if (buf2 + len > buf + sizeof(dgram->data)) {
+    DEBUG(2,("process_dgram: datagram from %s to %s IP %s for %s of type %d len=%d too long.\n",
+		nmb_namestr(&dgram->source_name),nmb_namestr(&dgram->dest_name),
+		inet_ntoa(p->ip), smb_buf(buf),CVAL(buf2,0),len));
+	len = (buf + sizeof(dgram->data)) - buf;
+  }
+
   /* Datagram packet received for the browser mailslot */
   if (strequal(smb_buf(buf),BROWSE_MAILSLOT))
   {
-- 
cgit