diff options
| author | Ralph Wuerthner <ralph.wuerthner@de.ibm.com> | 2013-07-10 08:59:58 +0200 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2013-09-06 10:48:37 +0200 |
| commit | 2b411e6219fbce5ef1499da4a141d31a8a295e89 (patch) | |
| tree | 80306d1c4dce8736523f6c9732659777788c3e63 | |
| parent | a6546016fa552407ea6ccd9c7ddb43737601484e (diff) | |
| download | samba-2b411e6219fbce5ef1499da4a141d31a8a295e89.tar.gz | |
s3:smbd: return NT_STATUS_INFO_LENGTH_MISMATCH for GetInfo in case output_buffer_length is too small
Reviewed-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Volker Lendecke <Volker.Lendecke@SerNet.DE>
(cherry picked from commit a93f9c3d33e442c84d0c9da7eb5d25ca4b54fc33)
| -rw-r--r-- | source3/smbd/smb2_getinfo.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/source3/smbd/smb2_getinfo.c b/source3/smbd/smb2_getinfo.c index 5616c849ade..ec0bad02206 100644 --- a/source3/smbd/smb2_getinfo.c +++ b/source3/smbd/smb2_getinfo.c @@ -498,6 +498,11 @@ static struct tevent_req *smbd_smb2_getinfo_send(TALLOC_CTX *mem_ctx, return tevent_req_post(req, ev); } + if (state->out_output_buffer.length > in_output_buffer_length) { + tevent_req_nterror(req, NT_STATUS_INFO_LENGTH_MISMATCH); + return tevent_req_post(req, ev); + } + tevent_req_done(req); return tevent_req_post(req, ev); } |