From 1050a54a3bb125af401f27cf0eb5a0ab51b085ea Mon Sep 17 00:00:00 2001
From: Andrew Tridgell <tridge@samba.org>
Date: Thu, 30 Jun 2005 01:34:53 +0000
Subject: r8003: ensure that we don't try to send a trans request with more
 than 64k data or params (This used to be commit
 b4f2d17ace6a609ec87da103a89e36edee8903f9)

---
 source4/libcli/raw/rawtrans.c | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'source4/libcli/raw')

diff --git a/source4/libcli/raw/rawtrans.c b/source4/libcli/raw/rawtrans.c
index 118ac5e3fd..b523232bc0 100644
--- a/source4/libcli/raw/rawtrans.c
+++ b/source4/libcli/raw/rawtrans.c
@@ -216,6 +216,14 @@ struct smbcli_request *smb_raw_trans_send_backend(struct smbcli_tree *tree,
 	size_t namelen = 0;
 	uint16_t data_disp, data_length, max_data;
 
+	if (parms->in.params.length > UINT16_MAX ||
+	    parms->in.data.length > UINT16_MAX) {
+		DEBUG(3,("Attempt to send invalid trans2 request (params %u, data %u)\n",
+			 parms->in.params.length, parms->in.data.length));
+		return NULL;
+	}
+	    
+
 	if (command == SMBtrans)
 		padding = 1;
 	else
-- 
cgit