From f6d98fe853074d7c4fba1bef3bf5dbbad98bf879 Mon Sep 17 00:00:00 2001
From: Andrew Tridgell <tridge@samba.org>
Date: Sun, 10 Sep 2006 11:32:31 +0000
Subject: r18330: don't mix pointer types in RPC replies (This used to be
 commit cc86719f53a47e3ca25b19d7a765314ce967ab01)

---
 source4/rpc_server/winreg/rpc_winreg.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'source4/rpc_server/winreg/rpc_winreg.c')

diff --git a/source4/rpc_server/winreg/rpc_winreg.c b/source4/rpc_server/winreg/rpc_winreg.c
index 4dc07b9dc1..17e711e235 100644
--- a/source4/rpc_server/winreg/rpc_winreg.c
+++ b/source4/rpc_server/winreg/rpc_winreg.c
@@ -399,7 +399,11 @@ static WERROR winreg_QueryValue(struct dcesrv_call_state *dce_call, TALLOC_CTX *
 
 	/* Just asking for the size of the buffer */
 	r->out.type = (enum winreg_Type *)&val->data_type;
-	r->out.length = &val->data.length;
+	r->out.length = talloc(mem_ctx, uint32_t);
+	if (!r->out.length) {
+		return WERR_NOMEM;
+	}
+	*r->out.length = val->data.length;
 	if (!r->in.data) {
 		r->out.size = talloc(mem_ctx, uint32_t);
 		*r->out.size = val->data.length;
-- 
cgit