diff options
author | Jeremy Allison <jra@samba.org> | 2010-02-09 12:17:08 -0800 |
---|---|---|
committer | Karolin Seeger <kseeger@samba.org> | 2010-02-22 16:16:44 +0100 |
commit | 8cac1af47cad9d40b0ab86cda3674f4420507008 (patch) | |
tree | 01294beb5c78a18cc4545a47fac6ca1dbf703af0 | |
parent | 5d4d547b901986cff378f640e9e22931d77c61b8 (diff) | |
download | samba-8cac1af47cad9d40b0ab86cda3674f4420507008.tar.gz |
Fix off-by-one error in working out the limit of the NetServerEnum comment.
Jeremy.
(cherry picked from commit 9ad6f432f3f5844b4b419e7cbaf3c3e70b052d29)
Signed-off-by: Stefan Metzmacher <metze@samba.org>
-rw-r--r-- | source/libsmb/clirap.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source/libsmb/clirap.c b/source/libsmb/clirap.c index 116e0a91759..ea9e439f1b1 100644 --- a/source/libsmb/clirap.c +++ b/source/libsmb/clirap.c @@ -389,7 +389,7 @@ bool cli_NetServerEnum(struct cli_state *cli, char *workgroup, uint32 stype, comment_offset = (IVAL(p,22) & 0xFFFF)-converter; cmnt = comment_offset?(rdata+comment_offset):""; - if (comment_offset < 0 || comment_offset > (int)rdrcnt) { + if (comment_offset < 0 || comment_offset >= (int)rdrcnt) { TALLOC_FREE(frame); continue; } |