From 07fcf2df0349d5e1294c92de8d982b62d11175a4 Mon Sep 17 00:00:00 2001
From: Andrew Tridgell <tridge@samba.org>
Date: Wed, 3 Jul 1996 01:58:27 +0000
Subject: - moved the protocol defs in the client to keep sill C compilers
 happy - added change for cnum range in reply_tdis() (This used to be commit
 609c3a5e1e3a8d9ba380a802ab3ecf6f47093846)

---
 source3/smbd/reply.c | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'source3/smbd')

diff --git a/source3/smbd/reply.c b/source3/smbd/reply.c
index 4cfa001ec2..13cc8efe5d 100644
--- a/source3/smbd/reply.c
+++ b/source3/smbd/reply.c
@@ -2062,6 +2062,11 @@ int reply_tdis(char *inbuf,char *outbuf)
   cnum = SVAL(inbuf,smb_tid);
   uid = SVAL(inbuf,smb_uid);
 
+  if (!OPEN_CNUM(cnum)) {
+    DEBUG(4,("Invalid cnum in tdis (%d)\n",cnum));
+    return(ERROR(ERRSRV,ERRinvnid));
+  }
+
   Connections[cnum].used = False;
 
   close_cnum(cnum,uid);
-- 
cgit