diff options
| author | Stefan Metzmacher <metze@samba.org> | 2015-07-16 22:46:05 +0200 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2016-04-12 19:25:28 +0200 |
| commit | 63a7d05d8ca1a6b48d6d21f5c43cac9908ec87c3 (patch) | |
| tree | d857f79d869fa6676e6b461e89747228d0e402ad /librpc | |
| parent | 14e5f9a25ea6ed1cd6f0ba0dfc3cb8bb80fdef7a (diff) | |
| download | samba-63a7d05d8ca1a6b48d6d21f5c43cac9908ec87c3.tar.gz | |
CVE-2015-5370: dcerpc.idl: add DCERPC_{NCACN_PAYLOAD,FRAG}_MAX_SIZE defines
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'librpc')
| -rw-r--r-- | librpc/idl/dcerpc.idl | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/librpc/idl/dcerpc.idl b/librpc/idl/dcerpc.idl index f7bf59542b2..015eb3d1815 100644 --- a/librpc/idl/dcerpc.idl +++ b/librpc/idl/dcerpc.idl @@ -532,8 +532,10 @@ interface dcerpc const uint8 DCERPC_PFC_OFFSET = 3; const uint8 DCERPC_DREP_OFFSET = 4; const uint8 DCERPC_FRAG_LEN_OFFSET = 8; + const uint32 DCERPC_FRAG_MAX_SIZE = 5840; const uint8 DCERPC_AUTH_LEN_OFFSET = 10; const uint8 DCERPC_NCACN_PAYLOAD_OFFSET = 16; + const uint32 DCERPC_NCACN_PAYLOAD_MAX_SIZE = 0x400000; /* 4 MByte */ /* little-endian flag */ const uint8 DCERPC_DREP_LE = 0x10; |