diff options
| author | Volker Lendecke <vl@samba.org> | 2015-02-17 20:19:10 +0000 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2015-02-24 17:52:09 +0100 |
| commit | eaf9fd4b7ac57ec3ab02991299b69420dbae8ad0 (patch) | |
| tree | c863658277d4b627ba0c61d23ddd71fd7d223b00 /libcli/smb/smbXcli_base.c | |
| parent | c7fe434d48fb52a7db18405004da03e479aec8d4 (diff) | |
| download | samba-eaf9fd4b7ac57ec3ab02991299b69420dbae8ad0.tar.gz | |
lib: Use iov_buflen in smb1cli_req_writev_submit
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Diffstat (limited to 'libcli/smb/smbXcli_base.c')
| -rw-r--r-- | libcli/smb/smbXcli_base.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/libcli/smb/smbXcli_base.c b/libcli/smb/smbXcli_base.c index ba00e96219e..f221045ac73 100644 --- a/libcli/smb/smbXcli_base.c +++ b/libcli/smb/smbXcli_base.c @@ -1455,6 +1455,7 @@ static NTSTATUS smb1cli_req_writev_submit(struct tevent_req *req, NTSTATUS status; uint8_t cmd; uint16_t mid; + ssize_t nbtlen; if (!smbXcli_conn_is_connected(state->conn)) { return NT_STATUS_CONNECTION_DISCONNECTED; @@ -1495,7 +1496,12 @@ static NTSTATUS smb1cli_req_writev_submit(struct tevent_req *req, } SSVAL(iov[1].iov_base, HDR_MID, mid); - _smb_setlen_nbt(iov[0].iov_base, smbXcli_iov_len(&iov[1], iov_count-1)); + nbtlen = iov_buflen(&iov[1], iov_count-1); + if ((nbtlen == -1) || (nbtlen > 0x1FFFF)) { + return NT_STATUS_INVALID_PARAMETER_MIX; + } + + _smb_setlen_nbt(iov[0].iov_base, nbtlen); status = smb1cli_conn_signv(state->conn, iov, iov_count, &state->smb1.seqnum, |