From 4721050df5dd268fbb99199c17071c2b05c61e1f Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Sun, 4 Nov 2007 15:38:43 -0800 Subject: Don't believe len returned from read_smb_length_return_keepalive(), it may be a UNIX large writeX (which wraps len in that case). Stevef this should fix your 128k write bug. Jeremy. (This used to be commit de2ebffa3c99ed28a3868fd956ef45629ca855b6) --- source3/smbd/process.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'source3') diff --git a/source3/smbd/process.c b/source3/smbd/process.c index aa39b01258..659b7b55e9 100644 --- a/source3/smbd/process.c +++ b/source3/smbd/process.c @@ -259,7 +259,7 @@ static ssize_t receive_smb_raw_talloc(TALLOC_CTX *mem_ctx, if (CVAL(lenbuf,0) != SMBkeepalive && min_recv_size && - len > min_recv_size && + smb_len_large(lenbuf) > min_recv_size && /* Could be a UNIX large writeX. */ !srv_is_signing_active()) { return receive_smb_raw_talloc_partial_read(mem_ctx, -- cgit